story-setup
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute various shell commands for environment diagnostics and state management. Examples include running
node --version,python3, anddate -uto populate the.story-deployedsentinel file, as well as executing framework-specific commands likenpx skills addfor component updates (found inSKILL.mdandreferences/diagnostics.md). - [DYNAMIC_EXECUTION]: The skill orchestrates the execution of multiple internal scripts provided within the skill package to handle configuration merging and agent generation. Key scripts mentioned include
merge-claude-settings.py,generate-antigravity-agents.mjs, anddeploy-antigravity-skills.py. It also calls external scripts from related skills, such astracking_commit.py(found inSKILL.mdandreferences/diagnostics.md). - [INDIRECT_PROMPT_INJECTION]: The skill presents a significant indirect prompt injection surface.
- Ingestion points: It reads and processes arbitrary user fiction projects, including manuscripts, directory structures, and configuration files (specified in
SKILL.md). - Boundary markers: It mentions using specific markers for configuration merging but lacks explicit instructions to disregard natural language instructions embedded within the ingested manuscripts.
- Capability inventory: The agent is granted the ability to write to the filesystem, execute local scripts, and run shell commands based on the state of the ingested project data.
- Sanitization: There is no evidence of sanitization or filtering for the external project content before it is processed by the orchestration logic.
Audit Metadata