do-create-pbi
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for documentation and project management tasks. Its operations are transparent and aligned with its stated purpose.- [COMMAND_EXECUTION]: The skill performs file system operations to create directories and save markdown documents (e.g.,
./pbis/pbi-[feature-slug]/pbi.md). These actions are standard for documentation tools and are restricted to the local project environment.- [EXTERNAL_DOWNLOADS]: The skill utilizes the agent's web search capability to research business rules and requirements. This is a legitimate use of the tool for planning purposes.- [PROMPT_INJECTION]: The skill processes user-provided descriptions and answers, which constitutes an indirect prompt injection surface. - Ingestion points: User input for feature requests and the
pbi-answers.mdfile (used for session resumption). - Boundary markers: No explicit delimiters are specified for user input interpolation into the PBI template.
- Capability inventory: File system writing and web search tools.
- Sanitization: The skill instructions require the agent to generate a kebab-case slug for directory names, providing a basic level of path normalization.
Audit Metadata