write-a-prd
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard project management workflow for generating and submitting documentation. It uses well-known integrations for issue tracking.
- [COMMAND_EXECUTION]: Employs legitimate tools including the GitHub CLI (
gh issue create) and the Atlassian MCP (createJiraIssue) to automate the submission of requirements. These operations are scoped to the intended functionality of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from the local codebase and user input to synthesize a PRD. While this creates a surface where malicious instructions in code comments could attempt to influence the output, the behavior is constrained to template-based generation and submission to project management tools.
Audit Metadata