new-product-prd
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data to generate product documentation, which presents an attack surface for indirect prompt injection.
- Ingestion points: The skill reads user-supplied inputs such as the 'Project Brief', 'Market Research' findings, and natural language descriptions of product features to populate PRD templates.
- Boundary markers: No explicit boundary markers or 'ignore embedded instructions' delimiters are defined in this skill wrapper to separate user data from agent instructions.
- Capability inventory: The skill delegates operations to the
create-prdandcreate-doctools, which have the capability to write files to the local file system (within${PRD_ROOT}) and update project registries. - Sanitization: There is no evidence of input validation, escaping, or sanitization of the external project data before it is interpolated into the document templates.
Audit Metadata