prd-prototype

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates on local project files within the prd/ directory to generate structured prototype outputs in prd/prototype/. All file system operations are scoped to the project environment.
  • [SAFE]: The skill includes a multi-stage quality assurance mechanism, including link checking and integrity validation via local scripts (scripts/link_checker.js, scripts/prototype_validator.js). These scripts use standard Node.js modules for file processing.
  • [SAFE]: External assets for the generated prototypes are sourced from well-known technology providers and trusted CDNs, including Google Fonts (fonts.googleapis.com), Tailwind CSS (cdn.tailwindcss.com), and UNPKG (unpkg.com) for React and Lucide icons.
  • [SAFE]: The preview functionality uses a standard Python HTTP server (python -m http.server) for local viewing, which is a common and safe practice for web development tasks.
  • [SAFE]: While the skill processes user-provided PRD content (Category 8 surface), it employs structural parsing and predefined templates rather than raw interpolation, reducing the risk of accidental execution of malicious instructions embedded in the source documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 08:12 AM