sb-ship

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs standard file management tasks such as copying, moving, and creating files using common utilities like bash, git, and ast-grep. These operations are well-scoped to the stated purpose of managing a Storybook-based project.
  • [SAFE]: Execution of external tools is restricted to well-known developer utilities like tsc and eslint via npx. The implementation in validate-stories.sh uses the --no flag with npx, which prevents the automatic installation of missing packages, mitigating risks of unintended remote code execution.
  • [SAFE]: Scripts used for discovery and validation (find-stories-by-tag.sh, validate-stories.sh) follow shell scripting best practices, such as quoting variables to prevent word splitting and command injection during file path processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 06:55 PM
Security Audit — agent-trust-hub — sb-ship