drama-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/drama_workflow.pyperforms dynamic path manipulation to import dependencies from the vendor's local file structure (../../text-splitter/scriptsand../../text-truncator/scripts). This behavior constitutes dynamic loading from computed paths, which is functional for a multi-skill workflow but involves modifying the runtime path. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted story content that could contain embedded instructions intended to override agent logic.
- Ingestion points: The
input_textparameter in theexecute_workflowmethod ofscripts/drama_workflow.py. - Boundary markers: Absent; the skill does not use delimiters to wrap external data or provide 'ignore instructions' warnings.
- Capability inventory: The script performs text splitting, truncation, and coordinates the integration of analysis results into a structured report.
- Sanitization: Absent; no validation, escaping, or filtering is performed on the user-provided story text.
Audit Metadata