requirements-doc
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a legitimate development tool that automates the generation of requirements documents. It operates entirely on local files within the user's project directory and does not exhibit any suspicious behaviors.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external UI specifications. This ingestion surface is managed by a local extraction script that sanitizes the input before it is used by the AI agent, minimizing the risk of indirect prompt injection.
- [EXTERNAL_DOWNLOADS]: The skill includes references to Mermaid.js and Google Fonts in its HTML templates. These are well-known and trusted services used for rendering documentation diagrams and styles, posing no security risk.
Audit Metadata