Scan Report
5 /100
story-writer
Complete end-to-end story development and writing system with project management (Discovery, Story Bible, Book Bible, Drafting, Review, Export)
This is a benign story-writing pipeline skill with no security issues. All 10 Python scripts are pure content-generation tools operating entirely locally with no network, shell, credential, or sensitive-path access.
Safe to install
No action needed. This skill is safe to use as-is.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | Scripts read/write discovery.json, story-bible.md, book-bible.md, chapters/*.md,… |
| Network | NONE | NONE | — | No scripts make HTTP requests or network calls |
| Shell | NONE | NONE | — | No scripts use subprocess, os.system, or shell execution |
| Environment | NONE | NONE | — | No scripts read os.environ or access environment variables |
| credential | NONE | NONE | — | No scripts access ~/.ssh, ~/.aws, .env, or API keys |
| Browser | NONE | NONE | — | No browser automation or web access |
| Database | NONE | NONE | — | No database connections |
File Tree
17 files · 174.0 KB · 5422 lines Python 10f · 3495L
Markdown 7f · 1927L
├─
▾
references
│ ├─
fiction-genres-encyclopedia.md
Markdown
│ ├─
query-submission.md
Markdown
│ ├─
revision-checklist.md
Markdown
│ ├─
structure-frameworks.md
Markdown
│ ├─
style-guide.md
Markdown
│ └─
world-building-prompts.md
Markdown
├─
▾
scripts
│ ├─
beat-sheet.py
Python
│ ├─
book-bible-generator.py
Python
│ ├─
chapter-tracker.py
Python
│ ├─
discovery.py
Python
│ ├─
draft-chapter.py
Python
│ ├─
export-html.py
Python
│ ├─
project-status.py
Python
│ ├─
review-book-enhanced.py
Python
│ ├─
review-book.py
Python
│ └─
story-bible-generator.py
Python
└─
SKILL.md
Markdown
Security Positives
✓ No network requests - all scripts operate entirely locally
✓ No shell or subprocess execution in any script
✓ No credential harvesting or sensitive path access (~/.ssh, ~/.aws, .env)
✓ No base64, eval, or obfuscation patterns
✓ No remote code execution or curl|bash patterns
✓ No prompt injection vectors
✓ No supply chain risks - no external dependencies (no requirements.txt, package.json, or Cargo.toml)
✓ Documentation accurately describes all script behaviors
✓ No hidden functionality - all code paths are straightforward content generation
✓ All file I/O is scoped to the project directory (discovery.json, *.md, chapters/, export/)