forge-story
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bash,Grep, andGlobtools to navigate the project directory, identify existing documentation, and verify the structure of generated story files within thedocs/stories/directory. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) by ingesting and processing content from external, user-controlled documents.
- Ingestion points:
docs/project-brief.mdanddocs/architecture.mdare read and analyzed to generate tasks. - Boundary markers: Absent; there are no instructions provided to the agent to treat the content of these documents as untrusted or to ignore embedded instructions within them.
- Capability inventory: The agent has access to
Bash,Write,Edit,TaskCreate, andTaskUpdatetools, which could be misused if the source documents contain malicious instructions. - Sanitization: No explicit sanitization or validation of the input document content is performed before the information is used to drive the workflow.
Audit Metadata