ln-221-story-creator
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting external data and interpolating it into story documents.
- Ingestion points: The
idealPlanandnewStoryDescriptioninput parameters inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used during the data interpolation process.
- Capability inventory: The skill utilizes the
save_issuetool for Linear integration and theWriteandmkdircommands for local file system operations. - Sanitization: Although the skill performs INVEST validation on the logic and structure of the stories, there is no technical sanitization of the input strings to prevent prompt injection or escape sequences.
Audit Metadata