baoyu-comic

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to execute the bun runtime for script processing and includes the pdf-lib library for document compilation. These are well-known developer tools and packages utilized safely within the skill's intended workflow.
  • [PROMPT_INJECTION]: The skill's primary function is to process user-provided content into comics, which naturally involves an indirect prompt injection surface. 1. Ingestion points: Untrusted user text is saved to source.md for analysis. 2. Boundary markers: The agent uses provided storyboard and character templates to structure outputs, which acts as a logical delimiter. 3. Capability inventory: The skill executes local TypeScript scripts to merge images into PDFs and generate character references. 4. Sanitization: Content is analyzed through a dedicated framework prior to prompt generation to ensure thematic consistency.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 02:27 AM