create-prd
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a document generator that ingests untrusted user input to populate a Product Requirements Document.
- Ingestion points: User-provided feature requests and answers to clarifying survey questions are directly incorporated into the PRD template in SKILL.md.
- Boundary markers: The skill uses standard Markdown headers for sections but lacks specific delimiters or instructions that would prevent the agent from potentially following instructions embedded within the user-provided text.
- Capability inventory: The skill is designed to perform file system write operations to create markdown files in the
prds/directory. - Sanitization: There is no evidence of input validation or sanitization for the text provided by the user before it is stored in the local file system.
Audit Metadata