storybook-upgrade
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches upgrade guidelines from Storybook's official documentation website (storybook.js.org).
- [REMOTE_CODE_EXECUTION]: Instructs the agent to execute the
npx storybook@next upgradecommand. This involves downloading and running the latest pre-release version of the Storybook CLI tool from the official NPM registry, which is the standard method for project upgrades. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by instructing the agent to read and follow instructions from an external URL. While the source is a trusted official documentation site, processing external web content is a standard risk factor for agents.
Audit Metadata