user-story
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a public GitHub repository (
github.com/deanpeters/product-manager-prompts) for documentation and provenance. This is an informational reference to a well-known service and does not involve runtime downloads of executable code. - [COMMAND_EXECUTION]: The skill includes a local Python script (
scripts/user-story-template.py) and provides example commands for its use. The script is a simple utility that uses the standard library to format user-provided strings into a markdown template. It has no network capabilities, does not write to the file system, and does not require elevated privileges. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied personas and requirements to generate stories. It uses clear Markdown headers as boundary markers and the logic is implemented via a deterministic Python script, which limits the risk of the agent misinterpreting embedded instructions as its own commands.
Audit Metadata