product-implement
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected. The skill follows best practices for structured agent workflows, including explicit tracking of decision status and source traceability.
- [INDIRECT_PROMPT_INJECTION]: The skill manages a potential injection surface from external PDR files through comprehensive safety guardrails.
- Ingestion points: Processes markdown files located in the
.adlc/drafts/pdr/directory (SKILL.md). - Boundary markers: Implements status filtering (Accepted only) and requires explicit ID traceability (REQ-XXX to PDR-NNN).
- Capability inventory: Accesses the local filesystem for reading templates and writing sections/indexes; executes local validation scripts (
scripts/bash/validate-prd.sh). - Sanitization: Enforces a mandatory 'Requirements Checkpoint' requiring user approval before proceeding to downstream sections (NFRs, Risks, Roadmap) and utilizes rigid Markdown templates to constrain model output.
Audit Metadata