story-long-write
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a complex writing coach workflow. It relies on a well-defined project structure and several helper scripts to maintain consistency and quality.
- [COMMAND_EXECUTION]: The Python script
storyctl.pyusessubprocess.runto invoke local Node.js linting scripts (check-ai-patterns.js,check-degeneration.js, etc.). These operations are used to verify the output of the writing process and do not involve shell injection or execution of arbitrary code. - [DYNAMIC_EXECUTION]: Local Python modules are loaded via
importlibinstoryctl.pyandtracking_commit.py. This is used to share core logic between scripts and is restricted to files within the skill's own directory. - [DATA_EXPOSURE]: The skill manages an 'author memory' and story state within the project's workspace (e.g., in
.story/作者记忆/and追踪/). These operations are consistent with the skill's purpose of tracking a long-form narrative's continuity and the author's stylistic preferences.
Audit Metadata