user-story-mapping-workshop
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (Product/Feature and User Context) at the start of the workshop to inform the generated map.
- Ingestion points: User context dump and product feature descriptions are collected in
SKILL.md(Step 0). - Boundary markers: None identified; user input is interpolated directly into the session logic without specific delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill generates markdown text and interacts with other local skills (e.g.,
user-story). No shell execution, file-system writing, or network operations are present. - Sanitization: None identified.
Audit Metadata