storybook-startup-benchmark
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical guidance for measuring Storybook startup metrics. It describes how to coordinate a browser and a server process to calculate timing between process spawn and the first story render.
- [COMMAND_EXECUTION]: While the skill suggests executing shell commands like
storybook dev, these are well-known commands for the Storybook ecosystem (owned by the author 'storybookjs') and are used within the scope of the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading timing data and signals from a browser environment (e.g.,
window.__sbStartupBenchmark). While this represents an ingestion point for external data, the context is limited to performance metrics in a controlled benchmarking scenario, posing a negligible security risk.
Audit Metadata