OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit May 9, 2026
Independent checks from skills.sh's audit partners.
The skill generates a Product Requirements Document (PRD) from the conversation history and codebase context, then publishes it to a project issue tracker. It presents a surface for indirect prompt injection because it processes untrusted codebase content without safety boundaries, though this is a common characteristic of context-aware development tools.
Detected behaviors
No alerts
No issues