harness-prd

SUSPICIOUS: The core PRD-writing purpose is coherent, and there is no clear malware behavior, credential harvesting, or remote code execution. Risk comes from undocumented slash-command dependencies, unspecified external publishing destination, and autonomous issue-tracker actions without explicit approval.