chapter-skeleton
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from
outline/taxonomy.ymlandGOAL.md. Malicious content within these files could influence the generated chapter skeleton, potentially affecting downstream agent tasks. - [DYNAMIC_EXECUTION]: The
scripts/run.pyscript dynamically modifies the Python search path usingsys.path.insert(0, str(repo_root))to load the localtoolingpackage. This is a common pattern in monorepos but involves runtime modification of the execution environment. - [COMMAND_EXECUTION]: The skill instructions define a workflow involving the execution of the local Python script
scripts/run.pyusinguv run. This script performs file system operations including reading inputs, creating backups, and writing YAML output.
Audit Metadata