user-story-writing
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data in the form of requirements and acceptance criteria. This creates a surface for indirect prompt injection where instructions could be embedded in the requirements. However, the skill lacks any active capabilities, such as network access or shell command execution, that would allow for exploitation.
- [NO_CODE]: The skill does not include any scripts (Python, JavaScript, shell) or configuration files that execute logic. It is composed entirely of static Markdown templates and checklists.
Audit Metadata