feature-shaper
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local codebase content and user input to generate feature documentation.
- Ingestion points: The skill ingests untrusted data from the project's source code files (via subagent exploration) and accepts arbitrary text input from the user during the discovery phases.
- Boundary markers: No explicit delimiters, boundary markers, or instructions to ignore embedded commands are used when the agent processes the codebase context or user-provided ideas.
- Capability inventory: The skill has the capability to write generated documentation to the filesystem, specifically creating files in
docs/features/anddocs/prd/directories. - Sanitization: The skill does not implement sanitization or validation of the content extracted from the codebase or provided by the user before incorporating it into the final output documents.
Audit Metadata