requirements-clarity

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill follows secure practices by restricting its output to a specific subdirectory (./docs/prds/) and provides clear boundaries for its activation. No unauthorized network activity or credential exposure was detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requirements as its primary input, creating a surface for indirect prompt injection. 1. Ingestion points: User requirement description input defined in SKILL.md. 2. Boundary markers: Absent; the skill does not wrap input in delimiters or instructions to ignore embedded commands. 3. Capability inventory: Uses a Write tool to create PRD files in the ./docs/prds/ directory. 4. Sanitization: Absent; no explicit filtering or validation of user input is performed before interpolation into the final document.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 12:58 PM