Security audit
Security checks for vulnerabilities and agentic risk
SagaSmith mostly implements D&D campaign tools, but it also includes broad personal-assistant instructions that are not clearly disclosed by the D&D skill description.
Install only if you want both a persistent D&D campaign manager and are comfortable reviewing or removing the bundled general-assistant templates. Before use, check AGENTS.md and templates/agent/identity.md, limit calendar/email/social/message tools unless explicitly needed, and treat save/load/delete actions as real changes to local campaign data.
def _row(model: Any, fields: tuple[str, ...]) -> dict[str, Any]:
return {field: _json_value(getattr(model, field)) for field in fields}
def _snapshot_hash(payload: dict[str, Any]) -> str:"schema_version": SNAPSHOT_SCHEMA_VERSION,
"campaign_id": campaign_id,
"captured_at": datetime.now(UTC).isoformat(),
"campaign": {field: _json_value(getattr(campaign, field)) for field in _CAMPAIGN_FIELDS},
"state": state,
}aggregate = self._find_aggregate(session, revision)
payload = dict(revision.before_state_json or {})
state_attribute = "sheet_json" if isinstance(aggregate, Character) else "state_json"
current = dict(getattr(aggregate, state_attribute) or {})
setattr(aggregate, state_attribute, payload)
if isinstance(aggregate, Character):No suspicious patterns detected.