pm-roadmap
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses bash to check for the presence of local files like PRD documents and existing roadmaps within the docs/ directory. These are non-intrusive existence checks.
- [INDIRECT_PROMPT_INJECTION]: The skill collects product vision and roadmap details from the user via AskUserQuestion and incorporates them into a markdown file. While this creates a vulnerability surface for indirect prompt injection, it is standard for documentation-focused skills. Mandatory Evidence Chain: 1. Ingestion points: AskUserQuestion in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Bash (file existence checks), Write (file creation). 4. Sanitization: Absent.
Audit Metadata