story-outliner
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is text processing. No evidence of malicious behavior, credential harvesting, or unauthorized system access was found.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted story text from users, which represents a potential injection surface. However, the threat is mitigated by the lack of dangerous tools or system permissions.\n
- Ingestion points: Story text input field defined in SKILL.md.\n
- Boundary markers: No explicit delimiters are used to wrap user input.\n
- Capability inventory: Limited to the 'Read' tool; the skill lacks network, file-write, or shell execution capabilities.\n
- Sanitization: No content filtering or input sanitization is implemented.
Audit Metadata