sb-ship
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard file management tasks such as copying, moving, and creating files using common utilities like
bash,git, andast-grep. These operations are well-scoped to the stated purpose of managing a Storybook-based project. - [SAFE]: Execution of external tools is restricted to well-known developer utilities like
tscandeslintvianpx. The implementation invalidate-stories.shuses the--noflag withnpx, which prevents the automatic installation of missing packages, mitigating risks of unintended remote code execution. - [SAFE]: Scripts used for discovery and validation (
find-stories-by-tag.sh,validate-stories.sh) follow shell scripting best practices, such as quoting variables to prevent word splitting and command injection during file path processing.
Audit Metadata