prd-mode

SUSPICIOUS: the stated purpose is benign, but the footprint is broader than necessary for a PRD-writing skill and it depends on another skill, creating transitive trust risk. Install provenance for `npx skills add` appears official/documented, so this is not strong malware evidence, but the combination of broad permissions, execution capability, and companion-skill reliance makes the skill higher risk than its purpose suggests.