vibe-prd
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, creating a surface for indirect prompt injection.
- Ingestion points: The skill is instructed in SKILL.md to 'Use existing research' and the 'user's request' to define product outcomes.
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the research documents.
- Capability inventory: The skill has the capability to 'Write' to the filesystem to save PRD files and use 'AskUserQuestion' to interact with the user.
- Sanitization: No evidence of validation, filtering, or sanitization of ingested content was found in the provided instructions.
Audit Metadata