prd-update-decisions
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill defines a process for the agent to ingest conversation history and PRD content to propose updates. This ingestion of untrusted data from chat history represents a surface for indirect prompt injection. However, the impact is mitigated as the skill only performs document updates and lacks high-privilege capabilities such as shell execution or network exfiltration.
- Ingestion points: Reads conversation context and PRD files from the
prds/directory (Step 1 and Step 2). - Boundary markers: None identified; the agent is not explicitly instructed to ignore embedded commands in the files it reads.
- Capability inventory: File read and write access, restricted to the
prds/path for updating documentation. - Sanitization: No specific sanitization logic is provided for the input text.
- [COMMAND_EXECUTION]: The skill does not invoke any shell commands or subprocesses. All instructions are related to text processing and analysis within the agent's logical context.
- [EXTERNAL_DOWNLOADS]: No instructions for downloading external scripts, packages, or remote code were detected. The skill references a source repository for attribution purposes only.
Audit Metadata