prd-slice
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill features a potential surface for indirect prompt injection because it fetches and processes untrusted data from external platforms.
- Ingestion points: PRD content is retrieved using
gh issue view(inreferences/github.md) andaz boards work-item show(inreferences/azure-devops.md). - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between the PRD text and system instructions.
- Capability inventory: The skill can create new work items and establish relationships using
gh issue createandaz boards work-item createacross the tracker reference files. - Sanitization: The skill does not implement sanitization or filtering on the content retrieved from the trackers.
- [COMMAND_EXECUTION]: The skill correctly uses established command-line tools (
ghandaz) to perform project management tasks. The commands are scoped to the intended functionality of reading and creating work items, and they incorporate best practices such as explicitly specifying repositories.
Audit Metadata