PRD FullStack Skill
v1.0.0全栈PRD协作工作流。与用户共同探讨，产出可供开发、设计、测试、运营、项目经理使用的完整PRD文档。 包含：需求分析、原型设计、UI规范、技术方案、测试方案、运营方案、项目计划等14个章节。 当用户说"帮我写PRD"、"做完整需求文档"、"产品需求文档"时触发。
⭐ 2· 264·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is a PRD/document generator and includes templates, prompts, build scripts, and a package.json that declares Playwright — all appropriate for producing HTML/PDF/Markdown PRDs. Minor inconsistency: the registry 'Requirements' section lists no required binaries/env, but README and package.json indicate Node.js >=16 and Playwright are required to run build scripts.
Instruction Scope
SKILL.md is conversational and stays within the PRD workflow. The included scripts read local template and fragment files and generate HTML/PDF outputs; they do not instruct the agent to read unrelated system files or to exfiltrate user data. One runtime behavior to note: the build/pdf scripts will load assets (e.g., fonts, images) which may cause external network requests when rendering (e.g., Google Fonts in CSS).
Install Mechanism
There is no external download/install spec in the registry (instruction-only), and the repository uses a standard npm dependency (playwright) declared in package.json. This is a common and expected dependency for PDF rendering; no unusual third‑party download URLs or archives are used.
Credentials
The skill declares no required environment variables or credentials and the scripts do not reference secrets. The only resources accessed are local template/fragment files and Node/Playwright; no unrelated cloud credentials or system config paths are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or long‑lived platform privileges. Its scripts update local version.json / output files within the project directory (normal behavior for a build tool) and do not modify other skills or global agent configuration.
Assessment
This skill appears to be what it claims: a PRD generator backed by local templates and Node scripts. Before installing or running build scripts: 1) Note that to run HTML/PDF builds you need Node >=16 and Playwright (Playwright will launch a Chromium process). 2) Review scripts (e.g., scripts/init-prd.sh, scripts/validate.js, update.sh) yourself — they read and write project files and invoke build/pdf steps but do not request secrets. 3) Be aware PDF generation may fetch external assets (fonts/images) from the network; if you are in an environment that forbids outbound connections, disable network access or host fonts locally. 4) Ensure version.json and fragments are what you expect before running update/build scripts to avoid build errors. If you plan to permit autonomous agent actions or run these scripts inside a sensitive environment, audit the scripts first and consider running them in an isolated/containerized environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97bsz9qe3k3cyfd611gz0bda183a3rx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.