Is create-prd-ec35cf safe to install?

SaferSkills independently audited create-prd-ec35cf (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.agents/skills/create-prd/SKILL.md · 1 file

.agents/skills/create-prd/SKILL.md1.9 KB · Markdown

name: create-prd

description:

"Create or update a feature PRD with user intent, scope, acceptance criteria, non-goals, security

notes, test expectations, and source-of-truth links. Use when starting a feature, drafting or

updating a PRD, or defining acceptance criteria."

Skill: Create PRD

Purpose

Create a useful feature PRD that helps humans and AI agents understand what should be built and why.

Inputs

Feature name or problem statement.
User goal or business reason.
Any existing product notes, tickets, or change requests.

Required Reading

docs/00-product/BRD.md
docs/00-product/PRD.md
Relevant existing docs/40-features/<feature>/
Relevant accepted ADRs in docs/adrs/

Output Files

docs/40-features/<feature>/PRD.md
docs/40-features/<feature>/ACCEPTANCE.md, when acceptance criteria are part of the request.
docs/40-features/<feature>/CHANGE_REQUESTS.md, when changing existing requirements.

Process

Identify the user, problem, desired outcome, and non-goals.
Link the feature to product goals and existing source-of-truth docs.
Define acceptance criteria that can be tested.
Capture security, privacy, file write, dependency, and MCP implications.
Identify architecture areas that require follow-up review.
Keep the PRD concise and implementation-guiding.

Stop Conditions

Stop and request human decision if:

Product intent is contradictory.
A requested behavior conflicts with an accepted ADR.
The feature adds network, telemetry, AI API, cloud, MCP runtime, auth, secrets, or file write

behavior without explicit approval.

Scope is too broad to define testable acceptance criteria.

Quality Bar

The PRD states goals, non-goals, users, acceptance criteria, risks, and source links.
Acceptance criteria are concrete enough to drive tests.
Security and architecture implications are not generic filler.
The PRD does not duplicate full architecture docs.

create-prd-ec35cf— agent skill

Is create-prd-ec35cf safe to install?

Skill: Create PRD

Purpose

Inputs

Required Reading

Output Files

Process

Stop Conditions

Quality Bar

Audit the pieces. Scan the whole. Decide.