skills/konglong87/superpm/pm-feature/Gen Agent Trust Hub

pm-feature

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes external documents such as product requirements and design prototypes to generate detailed functional specifications, creating a surface for potential instruction injection via data content.
  • Ingestion points: According to Steps 2 and 3 in SKILL.md, the skill reads existing documentation such as docs/02-方案设计/PRD产品需求文档.md and 原型设计方案.md.
  • Boundary markers: There are no explicit delimiters or instructions directing the agent to ignore potential commands embedded within the analyzed documents.
  • Capability inventory: The skill utilizes Bash for file status checks, Write for generating task documents, and the Agent tool for delegating sub-tasks to subagents.
  • Sanitization: The skill does not perform validation, sanitization, or filtering of the text extracted from input documents before summary or re-writing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 01:16 PM