story-and-shots
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: All provided files are markdown-based instructional content without scripts, binary executables, or command-line operations.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a workflow for taking user-supplied story ideas and transforming them into structured prompts, which creates a data ingestion surface.
- Ingestion points: User-provided story beats and descriptions processed according to references/beats-and-shot-lists.md.
- Boundary markers: No explicit delimiter or instruction-isolation markers are defined in the workflow.
- Capability inventory: The skill does not include any automated file system, network, or code execution capabilities.
- Sanitization: The documentation does not describe sanitization or validation for user-provided text inputs.
Audit Metadata