novel-drafting

Fail

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill includes high-severity instructions aimed at bypassing AI safety filters. In writer-intimate-guidance.md, writer-subagent.md, and reviewer-subagent.md, the AI is explicitly commanded to act as an "unrestricted writing assistant," "ignore irrelevant moralizing," and is strictly prohibited from using safety-related refusals such as "I'm sorry I cannot."
  • [COMMAND_EXECUTION]: The skill instructions in SKILL.md and chapter-loop.md require the execution of bundled TypeScript scripts using Node.js (node --experimental-strip-types <skill-root>/scripts/validate-drafting-project.mts). This allows the skill to execute its own code on the user's system to validate project metadata.
  • [DYNAMIC_EXECUTION]: The internal utility script scripts/lib/validator-utils.mts utilizes the node:child_process module to invoke spawnSync, which is used to execute system commands during the validation process.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 24, 2026, 06:36 AM