plot-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/plot_workflow.pydynamically modifiessys.pathusingsys.path.insertto load thetext_splitterandtext_truncatormodules from computed relative paths (../../text-splitter/scriptsand../../text-truncator/scripts). Loading code from outside the skill's root directory via relative paths is a form of dynamic loading from computed paths. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided story text, which presents an attack surface for indirect prompt injection.
- Ingestion points: The
input_textparameter in theexecute_workflowmethod ofscripts/plot_workflow.py. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the script or instructions.
- Capability inventory: The skill metadata in
SKILL.mdspecifies access to theReadandWritetools. - Sanitization: The script performs basic validation for non-empty input but does not implement filtering or sanitization of the story content itself.
Audit Metadata