novel-truncator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted novel text, which creates an ingestion surface for indirect prompt injection if the resulting output is treated as instructions by an agent.
- Ingestion points: The
novel_textstring andfile_patharguments inscripts/novel_truncator.pyallow for ingestion of external data. - Boundary markers: The skill outputs truncated text within a formatted report but does not utilize specific security delimiters or instructions to ignore embedded commands.
- Capability inventory: The script performs local file reading and string manipulation using the
remodule. - Sanitization: No sanitization or filtering is applied to the input text beyond the truncation logic for semantic preservation.
- [SAFE]: No other security issues were identified. The skill adheres to its stated purpose and does not engage in obfuscation, privilege escalation, or persistence behaviors.
Audit Metadata