baoyu-comic
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute thebunruntime for script processing and includes thepdf-liblibrary for document compilation. These are well-known developer tools and packages utilized safely within the skill's intended workflow. - [PROMPT_INJECTION]: The skill's primary function is to process user-provided content into comics, which naturally involves an indirect prompt injection surface. 1. Ingestion points: Untrusted user text is saved to
source.mdfor analysis. 2. Boundary markers: The agent uses provided storyboard and character templates to structure outputs, which acts as a logical delimiter. 3. Capability inventory: The skill executes local TypeScript scripts to merge images into PDFs and generate character references. 4. Sanitization: Content is analyzed through a dedicated framework prior to prompt generation to ensure thematic consistency.
Audit Metadata