prd-implementation-precheck
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill processes external PRD files which could contain malicious instructions designed to hijack the agent's behavior.
- Ingestion points: The skill reads local files and their references as part of the implementation workflow.
- Boundary markers: No delimiters or warnings to ignore embedded instructions are used in the prompt logic.
- Capability inventory: The skill uses powerful tools including
Write,Edit, andBash. - Sanitization: No input validation or sanitization is performed on the data read from files.
- Command Execution (SAFE): While the
Bashtool is enabled, it is primarily used forgrepsearches to ensure codebase consistency. No malicious command strings or obfuscated shells were found.
Audit Metadata