prd
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user feature descriptions to generate markdown PRDs. While this represents an ingestion surface for untrusted data, the skill's behavior is restricted to writing documentation and suggesting next steps, which align with its intended functionality.
- Ingestion points: User prompts and responses to clarifying questions as outlined in
SKILL.md. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The skill identifies the ability to create a
tasks/directory and write markdown files to it; it also suggests transitions to other internal agent skills such as/to-issuesand/prd-to-spec. - Sanitization: No specific input sanitization or validation logic is described for the user-provided text.
Audit Metadata