prioritization
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill uses structured frameworks for logical decision-making and project management.
- [DATA_EXPOSURE]: The skill reads from local JSON files containing user research, feedback synthesis, and market analysis. These operations are restricted to the project's internal documentation directory (
docs/product/.ompm/) and are consistent with the skill's primary function to inform prioritization decisions. - [NO_CODE]: The skill contains no executable scripts, system commands, or external dependencies. It relies exclusively on the AI's native reasoning capabilities to process provided input parameters.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests potentially untrusted data from user feedback files, it lacks any dangerous capabilities (such as shell access, network requests, or code execution) that could be exploited through injection. The attack surface is effectively mitigated by the absence of executable tools.
Audit Metadata