story-review
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes story content within sub-agent prompts, creating a surface for indirect prompt injection.
- Ingestion points: Story text is interpolated into the
{待审查内容}placeholder inSKILL.md(Phase 2). - Boundary markers: Lacks strong delimiters or specific instructions to ignore embedded commands within the analyzed story text.
- Capability inventory: The main agent can read local files and spawn sub-agents; the
consistency-checkerandstory-researchercan perform searches. - Sanitization: No filtering or validation is applied to the analyzed text before it is sent to sub-agents.
- [COMMAND_EXECUTION]: The skill uses local repository tools to facilitate the review process.
- Evidence: Employs
git diffto determine the review scope andgrepfor scanning project files during consistency checks.
Audit Metadata