prd
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for interactive documentation generation, following a clear and structured process for gathering, validating, and saving requirements.- [COMMAND_EXECUTION]: Employs basic shell commands via the Bash tool for directory discovery (
ls) and folder creation (mkdir). These actions are standard for project setup and do not involve high-risk parameters or privilege escalation.- [DATA_EXPOSURE]: The skill reads the local directory structure and the generated PRD file but does not access sensitive system paths, credentials, or personal data.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided responses to generate the PRD content. It mitigates risk by requiring explicit user confirmation ("ok") before saving any generated analysis or text to the file system.- [REMOTE_CODE_EXECUTION]: No remote resources are downloaded, and no external code is executed. All logic is contained within the skill instructions and the local environment.
Audit Metadata