prd-to-plan
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Product Requirement Documents (PRDs) which can be sourced from external GitHub issues or local project files.
- Ingestion points: PRDs located in .agents/docs/ or fetched as GitHub issues (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or instructions for the agent to ignore potentially malicious embedded content within the PRDs.
- Capability inventory: The skill allows the agent to write new files to the ./plans/ directory.
- Sanitization: There is no defined process for sanitizing the input data before it is processed into the implementation plan.
Audit Metadata