Prd Skill
v1.0.1Generate structured Product Requirements Documents (PRD) from natural language user requirements. Use when a user provides an app idea or feature request and...
⭐ 0· 140·1 current·1 all-time
by唐超@tc1993
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the instructions: the SKILL.md describes parsing requirements and producing a structured PRD. It mentions integration with dev-skill and qa-skill as the next steps, which is a reasonable part of an auto-dev pipeline and consistent with the stated purpose.
Instruction Scope
Instructions are focused on PRD creation. Two runtime behaviors to note: (1) it states it will save the PRD to a local path ('prd-output/' with timestamp) — writing files is not declared elsewhere but is plausible for a document generator; (2) it says it 'triggers dev-skill' and uses 'sessions_send' to coordinate pipeline steps. Those are not inherently malicious but are additional side effects (file writes and cross-skill triggering) beyond mere text generation and should be expected and reviewed prior to use.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is the lowest-risk model for installation because nothing is downloaded or written by an installer.
Credentials
The skill declares no required environment variables, credentials, or config paths. That fits its function of transforming input text into a PRD and handing it off to other pipeline skills; there are no disproportionate secret or credential requests.
Persistence & Privilege
always is false (normal). The skill is user-invocable and may be invoked autonomously per platform defaults. Combined with its explicit auto-triggering of dev-skill and session messaging, this means one invocation can spawn further pipeline actions — confirm you want that automation and that the downstream skills are trusted. The skill does not request persistent presence or modify other skills' configs in the provided instructions.
Assessment
This skill is coherent for generating PRDs. Before installing, confirm two operational details: (1) you are okay with the skill writing PRD files to a local 'prd-output/' directory (check where that folder will be created and who can access it); (2) the skill will automatically trigger downstream pipeline skills (dev-skill, qa-skill) via session messaging—make sure those skills exist and are trusted, otherwise disable or restrict automatic triggering. No credentials or external installs are requested, which reduces risk, but review and test the skill in a safe environment if you want to validate its auto-trigger behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk9772aprrh68dnv202feqajt0x83ghqh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
