create-prd
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands and a local Node.js script (
scripts/validate-prd.js) to perform structural validation and quality scoring on PRD files. These operations are restricted to the skill's specific purpose. - [EXTERNAL_DOWNLOADS]: The skill mentions external tools and installers such as Node.js, Homebrew, and nvm for environment setup. It includes explicit instructions to seek user confirmation before performing any installation tasks.
- [SAFE]: The skill's logic is consistent with its stated purpose. It uses structured templates and a batch-writing strategy to manage documentation tasks securely. No evidence of data exfiltration, obfuscation, or unauthorized access was found.
Audit Metadata