The Agent Skills Directory

[SAFE]: The skill is a template-based document generator that operates locally. It does not perform network requests, execute code, or access sensitive credentials.
[PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by interpolating user input into a generated file. Ingestion points: User-provided product ideas and target user details collected in SKILL.md. Boundary markers: Absent in assets/prd-template.md. Capability inventory: File-write operation for PRD.md to the project root. Sanitization: No sanitization or escaping is applied to user input before interpolation. Given the limited scope and lack of execution capabilities, this represents a minor surface rather than a direct threat.

generar-prd