PRD Review

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:19 PM UTC
• Version:
  1.0.0

Overview

This is a markdown-only PRD review helper with no code execution, persistence, credential use, or hidden privileged behavior.

Install this if you want a structured PRD or requirements-document review template. Before using it, confirm the document really is a PRD/requirements artifact and that the agent is allowed to access any linked or pasted business content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger phrases are very generic document-review requests, so this skill can be invoked in many ordinary contexts where a user did not specifically ask for a PRD-focused deep evaluation. That creates scope-capture and prompt-routing risk: unrelated documents may be processed under an opinionated framework, causing misapplication, confusion, or unintended handling of sensitive business content.

VirusTotal

63/63 vendors flagged this skill as clean.