prd-to-issues
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes content from external GitHub issues.
- Ingestion points: Fetches PRD content from GitHub via the
gh issue viewcommand in SKILL.md. - Boundary markers: Lacks delimiters or specific instructions for the agent to ignore instructions embedded within the PRD content.
- Capability inventory: The skill allows the agent to create new issues via
gh issue createbased on the external content. - Sanitization: No sanitization or validation of the PRD content is specified before the agent uses it to generate implementation tickets.
Audit Metadata