storybook-rsbuild

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project metadata to determine migration paths and configuration updates. This surface could theoretically be exploited if project files like package.json or .storybook/main.* contain adversarial content.
  • Ingestion points: package.json and .storybook/ configuration files (SKILL.md).
  • Boundary markers: None specified for the data ingestion process.
  • Capability inventory: File system modification, package installation/removal, and execution of Storybook development/build commands.
  • Sanitization: The skill relies on the agent's internal logic to parse standard configuration files without explicit sanitization steps.
  • [EXTERNAL_DOWNLOADS]: The skill references and fetches instructions from the official documentation site storybook.rsbuild.rs. This is a recognized service for the Rsbuild project.
  • [COMMAND_EXECUTION]: The skill involves running standard development commands such as storybook dev, storybook build, and package manager installation/removal commands. These are expected behaviors for a development-focused skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:53 AM