prd-architect — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited prd-architect (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guardrail protocol: no significant code generation begins without a clear PRD.
Code written against unclear requirements is technical debt from line one. This skill enforces a brief but real requirements pass before implementation — proportional to project size, not a bureaucratic gate for trivial requests.
| Request Type | PRD Needed? |
|---|---|
| "Build me a SaaS app for X" | ✅ Yes — full PRD |
| "Add a new feature: Y" to existing app | ✅ Yes — lightweight PRD |
| "Fix this bug" | ❌ No — straight to fix |
| "Write a function that does X" | ❌ No — clear, scoped |
| "Refactor this file" | ❌ No — clear, scoped |
| "I want to build a tool that helps people do X" | ✅ Yes — full PRD |
| "Add a button that does Y" | ⚠️ Lightweight — confirm scope only |
Rule of thumb: if the request requires guessing about scope, users, data models, or success criteria — stop and clarify first. If everything needed to implement correctly is already stated, proceed.
Before asking questions, check what the user already told you. Don't re-ask for stated info.
Common missing pieces:
Ask only what's needed to start. Use the ask_user_input_v0 tool for structured choices when applicable rather than open-ended prose questions.
❌ Asking 15 questions upfront before any progress
✅ Asking 2-4 high-leverage questions, then proceeding with stated assumptions for the restGenerate a structured PRD (template below), then confirm before writing code.
"Here's the PRD based on what you've described. Does this match your intent,
or should I adjust scope before I start building?"Then proceed to implementation once confirmed (or after one round of revision).
# [Product/Feature Name] — PRD
**Status**: Draft
**Date**: YYYY-MM-DD
---
## 1. Problem Statement
[1-2 sentences: what problem are we solving, for whom]
## 2. Target Users
| Persona | Description | Primary Need |
|---------|-------------|---------------|
| [Persona 1] | [who they are] | [what they need] |
## 3. Goals
- Goal 1
- Goal 2
## 4. Non-Goals (Explicit Scope Boundaries)
- NOT building X in v1
- NOT supporting Y use case yet
## 5. User Stories
| ID | As a... | I want to... | So that... |
|----|---------|--------------|------------|
| U1 | [user] | [action] | [outcome] |
## 6. Core Entities / Data Model
| Entity | Key Fields | Relationships |
|--------|-----------|----------------|
| User | id, email, name | has many Posts |
| Post | id, title, content, userId | belongs to User |
## 7. Functional Requirements
- [ ] FR1: [specific, testable requirement]
- [ ] FR2: [specific, testable requirement]
## 8. Non-Functional Requirements
- Performance: [e.g., page load < 2s]
- Scale: [e.g., support 1000 concurrent users]
- Security: [e.g., RLS on all tenant data]
## 9. Out of Scope (v1)
- [Explicitly deferred features]
## 10. Success Metrics
- [How we'll know this worked — measurable]
## 11. Open Questions
- [ ] [Anything still unresolved, with owner if applicable]For features added to an existing system, use a condensed version:
## Feature: [Name]
**Problem**: [1 sentence]
**Solution**: [1-2 sentences]
**In scope**:
- Point 1
- Point 2
**Out of scope**:
- Point 1
**Data changes**: [new fields/tables, or "none"]
**Success looks like**: [1 sentence]Use these as needed — don't ask all of them, pick the highest-leverage 2-4:
Scope & Users
Data
Constraints
Success
❌ Asking 10+ questions before writing anything — kills momentum, frustrates users with clear intent ❌ Skipping PRD for genuinely ambiguous greenfield requests — leads to building the wrong thing ❌ Writing a PRD for a one-line bug fix — disproportionate process for trivial work ❌ Treating the PRD as immutable — it's a starting point, refine as you learn during build ❌ PRD theater — don't pad with boilerplate sections that add no real information for small features
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.