story-done
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection through its processing of local project documentation.\n
- Ingestion points: The skill reads data from story files, architecture registries (tr-registry.yaml), control manifests, and GDD/ADR documents to determine its verification logic.\n
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore or isolate instructions that might be embedded within these ingested files.\n
- Capability inventory: The skill has the ability to execute shell commands via Bash, modify files using Write/Edit, and delegate tasks to other agents.\n
- Sanitization: No explicit content sanitization or validation logic is defined for the ingested data before it is used in prompts or tool calls.\n- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute unit and integration tests identified within the story metadata as a primary method of acceptance criteria verification.
Audit Metadata