storybook
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of Markdown documentation files providing a reference for Storybook API, CLI, and configuration. The content is strictly technical and educational in nature.
- [EXTERNAL_DOWNLOADS]: The documentation references several external services and repositories, including Chromatic, Figma, Playwright (Microsoft), and standard NPM/Yarn registries. These are well-known services within the frontend development ecosystem and are documented neutrally in accordance with the skill's purpose as a developer tool reference.
- [COMMAND_EXECUTION]: The skill provides numerous examples of CLI commands (e.g.,
storybook dev,npx storybook add,npm install). These are standard development workflows for the tool being documented and do not involve unauthorized or hidden execution patterns. - [DATA_EXPOSURE]: While the documentation mentions environment variables and configuration files (like
.envandmain.ts), it correctly advises against storing secrets in Storybook variables and demonstrates best practices for secret management in development environments. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a data source for the agent to answer questions about Storybook. The content is static and follows established documentation patterns, presenting a negligible risk for indirect injection via the provided reference files.
Audit Metadata