story-verify
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bashto execute a project detection script (lib/project-detector.sh) and standard file discovery commands (find) to locate test files and story definitions. These are routine operations within a developer's local workspace. - [SAFE]: Analysis of the workflow and subcommands (
invest,coverage,prp,ready) shows that logic is template-driven and relies on parsing local YAML and Markdown files. There is no evidence of remote code execution, prompt injection, or unauthorized data access.
Audit Metadata