to-prd
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository and conversation context to produce a GitHub issue, creating a surface for indirect prompt injection.
- Ingestion points: Codebase files and conversation history (SKILL.md).
- Boundary markers: Absent; the skill lacks explicit delimiters or instructions for the agent to ignore instructions embedded within the codebase content.
- Capability inventory: File system read access and GitHub issue creation.
- Sanitization: None; the skill does not specify any filtering or validation for content extracted from the repository before it is included in the final PRD.
Audit Metadata