user-story-implementer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell scripts (
create_pr.sh,prepare_story_branch.sh) to automate git and GitHub CLI (gh) workflows. - [BRANCH_VALIDATION]:
prepare_story_branch.shimplements strict validation of branch names usinggit check-ref-formatand prevents creating duplicate branches if a local or remote version already exists. - [PR_SAFETY]:
create_pr.shincludes validation for issue numbers (must be numeric), story IDs (regex validation), and design paths (prevents path traversal or script injection in metadata markers). - [REMOTE_CONSISTENCY]: Scripts verify that the local HEAD matches the remote branch before PR creation, preventing accidental pushes of stale or mismatched code.
- [DEPENDENCY_VERIFICATION]: The
prepare_story_branch.shscript verifies that any specified dependency PRs are actually merged into the default branch before allowing work to proceed, reducing the risk of broken builds or stale dependencies.
Audit Metadata