novel-writer-cli
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing system commands via the
wpsnote-cliutility to interact with the WPS Notes platform, including searching, reading, and editing notes. - Evidence: Usage of commands like
wpsnote-cli find,wpsnote-cli read,wpsnote-cli create, andwpsnote-cli batch-editthroughout the documentation. - [PROMPT_INJECTION]: The skill's architecture involves reading existing note content to inform future writing, which presents a surface for indirect prompt injection if note data contains instructions intended to manipulate the agent's behavior.
- Ingestion points: Note content is retrieved from the local environment and WPS cloud via
wpsnote-cli readandwpsnote-cli read-blocks(referenced inSKILL.md). - Boundary markers: No explicit delimiters or safety instructions are defined to separate user-provided note content from the agent's internal instructions.
- Capability inventory: The skill has the ability to execute CLI commands and perform write operations to the user's notes.
- Sanitization: The skill encourages the use of structured formats and the
--json-argsparameter when calling the CLI tool to minimize command injection risks during data interpolation.
Audit Metadata