NYC

storybook-component-documentation

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • Indirect Prompt Injection (SAFE): The skill facilitates the generation of documentation from component source code, which technically constitutes an ingestion of untrusted data. However, the risk is minimal given the specialized nature of the task.
  • Ingestion points: Source files (TS/JS/MDX) are accessed via Read, Grep, and Glob tools.
  • Boundary markers: Not explicitly defined; the skill relies on standard Storybook conventions.
  • Capability inventory: The agent has access to Write, Edit, and Bash to manage documentation files.
  • Sanitization: No specific sanitization of input source code is described, which is standard for documentation-generation assistants.
  • No Code (SAFE): This skill contains no executable scripts, binaries, or complex logic. It consists entirely of markdown instructions and code snippets intended for documentation templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:26 PM