prd-to-issues
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Uses the Bash tool to perform
git mvoperations, enabling the "ralph-loop" workflow for tracking task completion. - [DATA_EXFILTRATION]: Reads local Markdown files and explores the codebase to generate context-specific issues. No evidence of data being sent to external destinations was found.
- [PROMPT_INJECTION]: The skill ingests untrusted content from PRDs and plans (Ingestion points:
prds/). It lacks explicit boundary markers or sanitization for this content. Its capabilities includeWrite,Edit, andBash(Capability inventory: creating and moving files). - [EXTERNAL_DOWNLOADS]: The documentation references an installation command using
npxto fetch the skill from the author's own repository.
Audit Metadata