product-implement
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local shell and PowerShell scripts for operational tasks:
setup-product-implement.shandsetup-product-implement.ps1: Initialize the directory structure and check for existing PDR files.validate-pdr.shandvalidate-pdr.ps1: Perform validation checks on individual PDR files.validate-prd.shandvalidate-prd.ps1: Ensure the generated PRD matches required standards (Mermaid diagrams, section numbering, traceability).migrate-pdr-frontmatter.sh: A maintenance script that performs file system operations such as moving, deleting, and editing Markdown files to repair historical workspace inconsistencies.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data in the form of PDR files, which serves as a potential surface for indirect prompt injection.
- Ingestion points: Reads all
PDR-*.mdfiles from the.adlc/drafts/pdr/directory for analysis and content generation as described inSKILL.md(Step 1.1). - Boundary markers: Uses mandatory section templates and placeholders to structure the output, which helps mitigate accidental instruction following but does not provide complete isolation.
- Capability inventory: The skill has permissions to read and write files within the repository (
docs/adlc/and.adlc/) and to execute local scripts. - Sanitization: There is no explicit sanitization or escaping of the content read from PDR files before it is interpolated into the PRD generation phase.
Audit Metadata