to-prd
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard repository exploration and document synthesis tasks. No evidence of malicious intent, credential exfiltration, or unauthorized command execution was found.
- [PROMPT_INJECTION]: While the skill ingests untrusted data from the conversation history and codebase, it is for the purpose of document generation.
- Ingestion points: Conversation context and repository content (SKILL.md).
- Boundary markers: Absent; the agent is instructed to synthesize what it already knows without specific delimiters for external content.
- Capability inventory: Read-only access to repository files and write access to the project's issue tracker.
- Sanitization: No specific sanitization logic is implemented for the synthesized output.
Audit Metadata