prd-generator
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard git commands (fetch, pull, rebase, push, stash, rev-parse) to manage repository synchronization and version control. These are appropriate for the skill's purpose of managing files in a git repository.
- [COMMAND_EXECUTION]: The skill attempts to run a local script
python3 scripts/update_readme_ideas_index.pyif present in the repository to maintain an index file. This is a common pattern for project-specific automation. - [SAFE]: All external references for installation (npx, npm) point to official registries or the author's GitHub repository, which is consistent with the skill's identity.
- [SAFE]: The skill implements a mandatory backup mechanism (
prd.backup.YYYYMMDD_HHMMSS.md) before modifying existing files, reducing the risk of data loss.
Audit Metadata