user-story-mapping
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code, obfuscated content, or unauthorized network/file operations were detected. The skill includes specific defensive mandates to ensure foundational security controls are prioritized in the product MVP.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user input describing product features and personas to generate a story map.
- Ingestion points: User-defined personas, activities, and tasks provided during the mapping process described in SKILL.md.
- Boundary markers: Absent; the instructions do not define specific delimiters for separating user content from system instructions.
- Capability inventory: None; the skill does not utilize any shell commands, network operations, or file system modification tools.
- Sanitization: Absent; the skill relies on standard LLM processing without explicit input validation or escaping.
Audit Metadata