code-to-prd
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The Python scripts (
scripts/codebase_analyzer.pyandscripts/prd_scaffolder.py) utilize only the Python standard library. There are no external dependencies or remote script downloads. - [SAFE]: No data exfiltration or unauthorized network communication patterns were detected. The scripts operate entirely within the local file system to analyze the provided project path.
- [SAFE]: The skill does not employ dangerous execution patterns. It avoids the use of
eval(),exec(), orsubprocesscalls that could be used for arbitrary command execution. The analysis is performed via string parsing and regular expressions. - [SAFE]: The instructions in
SKILL.mdare consistent with the skill's stated purpose. There are no prompt injection attempts, safety bypass instructions, or obfuscated blocks designed to hide malicious intent. - [SAFE]: The skill provides clear attribution and follows standard development practices for documentation tools.
Audit Metadata