user-story
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external "product intent" and transform it into documentation artifacts.
- Ingestion points: Untrusted content enters the context via user-provided prompts during the user story creation process (defined in
SKILL.md). - Boundary markers: There are no defined delimiters or instructions to ignore embedded commands within the input text.
- Capability inventory: The skill's capabilities are restricted to text generation and file system writes to documentation directories; it lacks any tool access for network operations or command execution.
- Sanitization: The skill does not perform sanitization or escaping of the input data.
Audit Metadata