storybook-component-documentation
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes component source code and JSDoc comments to generate documentation, which represents an indirect prompt injection surface.
- Ingestion points: The agent uses Read, Grep, and Glob tools to ingest content from local component files and stories as part of the documentation process.
- Boundary markers: The provided templates do not include specific boundary markers or instructions to ignore potential commands within the source data.
- Capability inventory: The skill has access to Write, Edit, and Bash tools, which could be misused if the agent were to obey instructions found within ingested source files.
- Sanitization: There is no evidence of sanitization or filtering of the ingested source code content before it is processed.
Audit Metadata