writing-prds
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates project management workflows by executing GitHub CLI (
gh) commands to interact with tracker issues. This includesgh issue listto search for existing documents,gh issue viewto read content, andgh issue createorgh issue editto store the drafted PRDs. These operations are restricted to the repository tracker and are part of the skill's core functionality for managing requirements.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) through its integration with external data sources. * Ingestion points: External data is ingested from GitHub issue bodies viagh issue viewin the 'plan' and 'update' workflows. * Boundary markers: None identified. The skill relies on the structured PRD template to guide the model's focus. * Capability inventory: Subprocess calls includegh issue createandgh issue editfor modifying remote tracker state. * Sanitization: Includes a 'Quality Gates' checklist that validates PRD structure and content integrity (e.g., ensuring no placeholders, presence of measurable goals) before handoff to planning agents. The security risk is significantly mitigated by thedisable-model-invocation: trueflag in the skill frontmatter, which prevents the agent from triggering further tool executions while the skill is active.
Audit Metadata