story-mapping
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides purely instructional content for business analysis and project planning. No malicious patterns, such as command execution, network exfiltration, or credential harvesting, were detected.
- [NO_CODE]: There are no executable scripts (Python, JavaScript, etc.) or binary files associated with this skill. It relies exclusively on natural language instructions and standard Mermaid flowchart syntax.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting external user data (Product details, Persona descriptions, and Journey sources) to generate story maps and reports. Ingestion points: User-provided inputs in Phase 1 (SKILL.md). Boundary markers: Not explicitly defined in the instructions. Capability inventory: Report generation and diagram rendering in Phase 8-10 (SKILL.md). Sanitization: None identified; reliance is placed on the underlying model's inherent guardrails.
Audit Metadata