scenario-identity-library
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes character briefs and interview answers provided by the user, which are then interpolated into prompts for image generation and identity management tools. Ingestion points: Character briefs, identity details (silhouette, proportions, palette), and signature details obtained via user interview as described in SKILL.md. Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded in the identity briefs. Capability inventory: The skill utilizes
model_runfor generation,collection_createandcollection_add_assetsfor library management, andcollection_remove_assetsfor asset manipulation. Sanitization: There are no explicit sanitization or validation steps mentioned for the user-supplied identity parameters before they are passed to tools. - [EXTERNAL_DOWNLOADS]: The skill contains instructions for the agent to recommend the installation of additional dependencies from the author's official repository. Evidence: The text suggests the user run
npx skills add scenario-labs/skillsto resolve missing sibling skills. Note: The target repository is owned by the skill author (scenario-labs) and constitutes a vendor resource.
Audit Metadata