generate-story-bank
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local npm scripts such as
check:coverageandsearch:evidenceto process user achievement data and identify content gaps. It also performs directory listings usinglsto manage files. - [PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection when transforming user-provided achievements.
- Ingestion points: Data is read from files in
content/knowledge/achievements/*.yaml. - Boundary markers: No specific boundary markers or instructions are provided to the agent to distinguish between achievement content and potential embedded commands.
- Capability inventory: The skill allows the execution of shell commands and file system access which could be leveraged if malicious instructions were successfully injected.
- Sanitization: No sanitization or validation of the input data is performed during the transformation process.
Audit Metadata