skills/matteocervelli/llms/story/Gen Agent Trust Hub

story

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the GitHub CLI (gh) for legitimate project management tasks such as creating and closing issues or managing milestones. These operations are scoped to the user's project and performed via the official tool.
  • [SAFE]: Data storage is handled through local YAML files and markdown templates within the project directory (stories/, docs/, templates/). No sensitive files (e.g., .env, .ssh) are accessed or transmitted.
  • [SAFE]: The project detector script (lib/project-detector.sh) is a local utility within the skill's own directory used to determine the execution context. This is standard behavior for project-aware skills.
  • [SAFE]: All identified templates and schemas follow standard Agile and Product Management best practices (INVEST, Given/When/Then, PRDs, etc.) without any hidden instructions or prompt injection vectors.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 11:45 AM
Security Audit — agent-trust-hub — story