to-prd
Pass
Audited by Gen Agent Trust Hub on May 30, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from the 'conversation context' and 'codebase understanding' which could contain adversarial instructions. \n
- Ingestion points: The skill ingests 'current conversation context' and performs 'codebase understanding' (SKILL.md). \n
- Boundary markers: Absent; the skill does not use delimiters or explicit instructions to distinguish between its own system instructions and the data being processed. \n
- Capability inventory: The skill has the capability to 'publish' synthesized content to a 'project issue tracker' (SKILL.md). \n
- Sanitization: No sanitization or validation of the ingested context is specified before it is used to generate the published PRD. \n- [NO_CODE]: The skill consists entirely of markdown instructions and templates without accompanying executable scripts or code files.
Audit Metadata