story
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the GitHub CLI (
gh) for legitimate project management tasks such as creating and closing issues or managing milestones. These operations are scoped to the user's project and performed via the official tool. - [SAFE]: Data storage is handled through local YAML files and markdown templates within the project directory (
stories/,docs/,templates/). No sensitive files (e.g.,.env,.ssh) are accessed or transmitted. - [SAFE]: The project detector script (
lib/project-detector.sh) is a local utility within the skill's own directory used to determine the execution context. This is standard behavior for project-aware skills. - [SAFE]: All identified templates and schemas follow standard Agile and Product Management best practices (INVEST, Given/When/Then, PRDs, etc.) without any hidden instructions or prompt injection vectors.
Audit Metadata