stories
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
@storybook/addon-mcppackage and performs version upgrades for Storybook usingnpx. - [COMMAND_EXECUTION]: Executes shell commands via
npx storybookto manage documentation, tool help, and the development server. - [INDIRECT_PROMPT_INJECTION]: The skill fetches its core development workflow from the output of an external command.
- Ingestion points: Output of
npx storybook skills get storiesand command help text. - Boundary markers: None; the agent is directed to follow the fetched workflow in its entirety.
- Capability inventory: File system modifications for UI components and execution of Storybook CLI tools.
- Sanitization: No validation or sanitization is performed on the fetched workflow before processing.
Audit Metadata