novel-drafting
Fail
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes high-severity instructions aimed at bypassing AI safety filters. In
writer-intimate-guidance.md,writer-subagent.md, andreviewer-subagent.md, the AI is explicitly commanded to act as an "unrestricted writing assistant," "ignore irrelevant moralizing," and is strictly prohibited from using safety-related refusals such as "I'm sorry I cannot." - [COMMAND_EXECUTION]: The skill instructions in
SKILL.mdandchapter-loop.mdrequire the execution of bundled TypeScript scripts using Node.js (node --experimental-strip-types <skill-root>/scripts/validate-drafting-project.mts). This allows the skill to execute its own code on the user's system to validate project metadata. - [DYNAMIC_EXECUTION]: The internal utility script
scripts/lib/validator-utils.mtsutilizes thenode:child_processmodule to invokespawnSync, which is used to execute system commands during the validation process.
Recommendations
- AI detected serious security threats
Audit Metadata