story-point-estimation
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and a structured framework for project management. It does not perform network operations, access sensitive system files, or request user credentials.
- [COMMAND_EXECUTION]: The skill utilizes a
diagram-renderingmixin and mentionsmmdc(Mermaid CLI) to generate charts. These are standard tools for technical documentation and are used here within the context of reporting velocity and release forecasts. - [DATA_EXPOSURE]: The skill defines a default output path for documentation (
/documentation/[case]/story-point-estimation/). This is a standard practice for documenting project management artifacts and does not represent an exfiltration risk. - [PROMPT_INJECTION]: The skill includes rules to prevent common estimation pitfalls (e.g., refusing to convert points to hours). These are functional constraints to ensure methodology adherence rather than attempts to override AI safety guardrails.
Audit Metadata