writing-storybook-stories
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
rg(ripgrep) utility to search for existing stories and naming patterns within the project's source and app directories. - [COMMAND_EXECUTION]: The workflow instructs the agent to execute standard development scripts such as
pnpm storybook,pnpm typecheck, andpnpm lintto validate the created stories. - [PROMPT_INJECTION]: The skill involves reading component source code from the project directory (ingestion points in
src/andapps/), which creates a surface for indirect prompt injection. No specific boundary markers or sanitization steps are defined for processing this content, while the agent possesses file-read and command-execution capabilities.
Audit Metadata