sb-stories

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns detected. The skill adheres to established development workflows for Storybook 9/10, focusing on local source code analysis and automated story scaffolding.
  • [COMMAND_EXECUTION]: The skill utilizes several local utility scripts (e.g., extract-states.sh, page-patterns.py, validate-stories.sh) to analyze the React codebase. These scripts use standard tools such as grep, awk, sed, and Python's ast module to detect component structures. All execution is confined to the local project environment.
  • [SAFE]: External references are limited to well-known technology services and official documentation (Storybook, Figma, Chromatic, Vitest, MSW). No untrusted remote scripts or hidden network operations were found.
  • [SAFE]: The skill's scaffolding logic (e.g., scaffold-factory.sh) correctly uses a 'stub' approach, requiring the agent to fill in required fields based on the project's own TypeScript types, ensuring the generated code remains synchronized with the host application's data models.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 01:16 PM
Security Audit — agent-trust-hub — sb-stories