story-long-write
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python and Node.js helper scripts (such as
check-ai-patterns.jsandwordcount_core.py) to perform specialized novel-writing tasks like stylistic analysis and word counting. These executions are initiated by the skill's own internal management scripts (scripts/storyctl.pyandscripts/build_writer_prompt.py) usingsubprocess.runand are restricted to the scripts distributed as part of the skill package. - [DYNAMIC_EXECUTION]: Modular loading of skill-internal components is used in
scripts/storyctl.pyto integrate wordcount and tracking logic. This is implemented using standard Pythonimportlibfunctions and is limited to loading local skill files for the purpose of modularity. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided novel content and outlines for stylistic and structural validation. While this creates a surface for indirect instructions, the skill's analysis logic is focused on deterministic stylistic metrics and structural consistency rather than responding to natural language instructions found within the novel text.
- [DATA_EXFILTRATION]: No evidence of unauthorized network activity or credential harvesting was found. The skill manages its state (e.g., plot progress, author preferences) using local Project project projects and project project proyek project files within the प्रोजेक्ट project folder.
Audit Metadata