sb-ship
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local bash scripts, such as
validate-stories.shandfind-stories-by-tag.sh, along with standard command-line tools likecp,git, andast-grepto manage file operations and code transformations during the graduation process. - [INDIRECT_PROMPT_INJECTION]: The skill acts upon project source code and Storybook files, creating a potential surface for instructions embedded in code to influence the agent.
- Ingestion points: The agent and its scripts read
.stories.tsxand.tsxfiles from the project repository. - Boundary markers: No explicit markers or warnings are used to distinguish between data (code) and instructions.
- Capability inventory: The skill possesses the ability to read and write files, as well as execute shell commands.
- Sanitization: The processed file content is not sanitized for potential prompt injection patterns.
- [DYNAMIC_EXECUTION]: The validation script can run
tscandeslintvianpxwhen strict checks are enabled. The use of the--noflag helps mitigate risks by restricting execution to packages already present in the local environment.
Audit Metadata