to-prd
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository and conversation context to generate structured output.
- Ingestion points: The skill explicitly gathers information from "current conversation context" and "codebase understanding" in SKILL.md.
- Boundary markers: The instructions do not define delimiters or provide "ignore embedded instructions" guidance to separate analyzed code content from the agent's task instructions.
- Capability inventory: The skill possesses the capability to explore the repository (file read) and publish data to an external "project issue tracker" (network/API write).
- Sanitization: No sanitization or validation steps are mentioned for the content retrieved from the codebase before it is interpolated into the PRD template.
Audit Metadata