lcs-prd-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from existing
prd.mdfiles. - Ingestion points: The skill reads content from
prd.mdlocated in the.lcs/work-items/directory. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore embedded commands within the source PRD.
- Capability inventory: The skill allows for file reading (
prd.md,.lcs/state.md) and file writing (prd-enhanced.md). It does not appear to use network or shell execution tools. - Sanitization: No sanitization or validation of the input text from
prd.mdis specified, meaning malicious instructions hidden in the PRD could potentially influence the agent's behavior during the review process.
Audit Metadata