prd-implementation-ready — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited prd-implementation-ready (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to figure out the product with the user before writing the document. The output must be readable for humans and complete enough that a developer or AI can implement it without asking another business question.
Use it for PRDs, BRDs, functional specs, SaaS/admin workflows, C-end/content products, tool SaaS, consumer apps, finance/payment/settlement flows, product iteration from v1 to v2, or any requirement where state, data, permission, page UX, notification, non-functional product behavior, or cross-module linkage can break implementation.
When NOT to use it: one field label, copy edit, visual-only tweak, pure technical implementation task, or a single-step requirement with no state/data/source/cross-role risk.
Core bar:
Default first response shape: context digest based on the user's context; deep business understanding plan; one-sentence business goal; known/unknown scope, users, objects, and risks; initial flow shape; likely small flows from observation lenses; inferred high-risk control loops for repeated/cyclic operations; 3-6 confirmation questions with recommended defaults.
references/stage-gates.md is the authoritative workflow. In plain text: stage-gates.md is the authoritative workflow. The progressive workflow summary is:
references/usage-path.md before loading heavy references.Diagram requirements: always consider flow shape, parallel flow convergence, business flow atlas, Mermaid flowcharts, stateDiagram-v2, object status changes, and diagrams before detailed rules when the PRD spans multiple objects/modules or has lifecycle/state risk.
For existing products or v1 to v2 changes, run the Version Evolution Gate before rewriting: old rule, change intent, impact range, old vs new, migration, backward compatibility, release/rollback, and decision record.
For module docs, keep details near the page/action/server flow where they matter. Page implementation details must include a page element inventory, fields, data source, status/writeback, permissions, idempotency, validation, error/empty/disabled states, feedback/recovery, and acceptance. Server-only automatic flows stay inside the module with trigger, input source, processing rule, persisted object, status/writeback, idempotency/retry, failure/compensation, visibility/log, and acceptance.
Read only what the current stage needs.
| Stage / Situation | Read |
|---|---|
| Choosing how to use this skill, selecting a mode, routing mixed requests, or explaining the best usage path | references/usage-path.md |
| Business understanding stage | references/stage-gates.md, references/business-context.md, references/research-and-flow.md |
| Domain fit, C-end, consumer app, content/social, or tool SaaS | references/domain-adaptation.md, references/user-stories-scenarios.md |
| Existing behavior, v1 to v2, migration, or compatibility | references/version-evolution.md, references/business-anchors.md |
| Rules design stage | references/coverage-matrix.md, references/data-flow.md, references/business-consistency.md |
| Finance, funds, costs, reconciliation, invoice, payroll, profit sharing | references/finance-operations.md then the indexed finance topic file |
| A feature takes data from an external system, other module, upstream object, imported file, sync result, configuration, or source detail list | references/data-flow.md, references/page-ui.md, references/business-consistency.md |
| A metric may be action input or only analysis/risk-control, such as cost attribution, usage share, occupancy, contribution, or profitability | references/data-flow.md, references/business-consistency.md |
| Amount composition or amount breakdown has hidden component sources such as cost basis, source total, service fee, adjustment lines, included detail list | references/data-flow.md, references/business-consistency.md, references/page-ui.md |
| Formula, list scope, amount basis, permission, or report dimension depends on binding, dedicated relationship, current relationship, latest configuration, or real-time fetch | references/data-flow.md, references/business-consistency.md, references/page-ui.md |
| Page design stage | references/page-ui.md, references/output-structure.md |
| Notifications, todos, pushes, emails/SMS, bot messages, webhooks | references/notifications.md, references/data-flow.md |
| Product-level non-functional decisions | references/non-functional.md |
| Source language, unsupported details, page/document term drift, technical wording, bilingual/public wording, or confusing terms | references/terminology.md, references/source-language-guards.md, references/page-ui.md |
| Final review stage | references/review-checklists.md, references/guardrail-checklist.md |
Gate authority:
references/data-flow.md#post-event-writeback-gate.references/data-flow.md#resource--value-flow-gate.references/finance-operations.md.references/guardrail-checklist.md.Stop and return to the workflow when any of these appears:
For the full staged list, use references/guardrail-checklist.md. Any P0 blocker means stop detailed writing until the issue is closed or explicitly marked pending with a recommended default.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.