prd-writer
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it is designed to ingest and process untrusted external data which may contain hidden instructions intended to influence the agent's behavior.
- Ingestion points: Step 1 involves reading user requests from potentially untrusted sources including Slack messages, emails, call notes, and Jira tickets.
- Boundary markers: There are no instructions provided to the agent to treat these inputs as data only or to ignore any embedded instructions or markdown formatting within them.
- Capability inventory: The skill has access to read local source code, repository maps, and has the permission to create new markdown files within the project's directory structure.
- Sanitization: The skill lacks any explicit sanitization or validation steps for the input text before it is processed or incorporated into the output PRD.
Audit Metadata