prd-generator
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted plain-language feature descriptions as its primary input (SKILL.md, Step 1) and maintains capabilities to modify the file system and communicate via multiple MCP connectors.
- Ingestion points: Feature descriptions provided by users during the initial prompt.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for the input data.
- Capability inventory: Access to
create_file,bash_tool, and MCP connectors for Atlassian, Slack, Linear, Asana, Notion, and Gmail. - Sanitization: No explicit sanitization or input validation is mentioned before the input is processed by the 10-role pipeline.
Audit Metadata