Skip to content
Back to skills

User Story Format

ASecurity

Shape of a user story file with acceptance criteria and edge cases. Use when writing or reading a story artifact.

  • 100 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added August 31, 2026
ai-agents

Security analysis

A100/100

Scanned August 31, 2026

npx -y skills add Inebrio/Routerly --skill user-story-format --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of User Story Format?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for User Story Format
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/inebrio-user-story-format/badge)](https://www.skillsdirectory.com/skills/inebrio-user-story-format)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: user-story-format
description: Shape of a user story file with acceptance criteria and edge cases. Use when writing or reading a story artifact.
---

# User story format

One file per story: `<specs-root>/<feature>/01-stories/<story-id>.md`.

```markdown
# <story-id> — <short title>

## Story
As <who>, I want <what>, so that <why>.

## Context
The two or three sentences from the analysis a reader needs. No more.

## Acceptance criteria
- **AC1** — Given <state>, when <action>, then <observable result>.
- **AC2** — ...

## Edge cases
- **EC1** — <condition> → <required behaviour>.

## Out of scope
What this story deliberately does not cover.

## Depends on
Story ids that must land first, and why.
```

## Rules

- Criteria are observable from outside the code. If checking one requires
  reading the implementation, rewrite it.
- Criteria are independent: the result of one never depends on which other
  criterion ran first.
- No file names, function names, endpoints, tables or components. A story
  that cannot be written without them is a design document.
- Edge cases are the ones this story can actually hit. Cover absent, empty,
  malformed, unauthorised, duplicate, concurrent and oversized inputs where
  they apply, and say what should happen, not that it "should fail".
- Numbered ids matter: the validator reports against them and the
  qa-engineer maps tests to them.
- One story is one deliverable. If it needs two independent verdicts, it is
  two stories.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.