prd-to-issues
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not exhibit any malicious patterns, obfuscation, or unauthorized access to sensitive data.
- [DATA_EXPOSURE]: The skill uses the
gh issue viewcommand to retrieve content from GitHub issues. This is consistent with its stated purpose of reading PRDs and does not involve access to restricted system files or credentials. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external GitHub issues, which is a common surface for indirect prompt injection. However, the workflow includes a human-in-the-loop validation step ('Quiz the user') where the agent must present the proposed issue breakdown for approval before execution. This manual review gate significantly mitigates the risk of the agent performing unintended actions driven by malicious instructions within a PRD.
- [COMMAND_EXECUTION]: The skill uses standard
ghCLI commands for issue management. These operations are scoped to the project's GitHub repository and are typical for development-focused agents.
Audit Metadata