Security audit
Assists in writing high-quality requirements documents using an 8-dimension framework
Security checks for vulnerabilities and agentic risk
Overview
This is an instruction-only writing helper for product requirements documents and does not request code execution, credentials, persistence, or system access.
This skill is appropriate to install if you want help structuring PRDs or requirements specs. It may prompt for product goals, metrics, risks, and business context, so avoid sharing confidential strategy or customer data unless that is acceptable in your agent environment.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.