prd-template
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that gathers user-supplied information to populate PRD sections.
- Ingestion points: User input is collected for Goals, Requirements, UI Design Goals, Technical Assumptions, and Epic details within
resources/prd-tmpl.yaml. - Boundary markers: The template does not utilize specific delimiters to isolate user-provided input within the Markdown output.
- Capability inventory: The skill performs file system write operations via the
create-doctool to save generated PRDs. - Sanitization: No explicit sanitization or validation is applied to user-provided text before it is written to files.
- [SAFE]: The skill references documentation and scripts within the official repository of the skill author (
gamaroff). These are recognized as legitimate vendor-owned resources used for document lifecycle management.
Audit Metadata