pdr-intake
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
mkdir -pcommand to ensure the necessary directory structure exists before writing PDR files to thedocs/prd/path. This is documented in the Hard Rules and Execution Steps ofSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input and existing local markdown files, creating a vulnerability to indirect instructions. 1. Ingestion points: User-provided product ideas and existing files at
docs/prd/{module}/{area}/{slug}-pdr.md. 2. Boundary markers: The instructions do not specify any delimiters or safety prompts to prevent the agent from following instructions embedded within the ingested data. 3. Capability inventory: The skill has the ability to read files, create directories (mkdir), and write markdown files within the designateddocs/prd/workspace. 4. Sanitization: The skill applies kebab-case normalization to file slugs but does not sanitize the content of the PDR extracted from user input.
Audit Metadata