prd-prototype
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates on local project files within the
prd/directory to generate structured prototype outputs inprd/prototype/. All file system operations are scoped to the project environment. - [SAFE]: The skill includes a multi-stage quality assurance mechanism, including link checking and integrity validation via local scripts (
scripts/link_checker.js,scripts/prototype_validator.js). These scripts use standard Node.js modules for file processing. - [SAFE]: External assets for the generated prototypes are sourced from well-known technology providers and trusted CDNs, including Google Fonts (
fonts.googleapis.com), Tailwind CSS (cdn.tailwindcss.com), and UNPKG (unpkg.com) for React and Lucide icons. - [SAFE]: The
previewfunctionality uses a standard Python HTTP server (python -m http.server) for local viewing, which is a common and safe practice for web development tasks. - [SAFE]: While the skill processes user-provided PRD content (Category 8 surface), it employs structural parsing and predefined templates rather than raw interpolation, reducing the risk of accidental execution of malicious instructions embedded in the source documents.
Audit Metadata