Back to PRD Generator Flow

Security Report

PRD Generator Flow

Warning
Version v1.1.21 Scanned 18 May 2026 at 22:00 Scanner v3.0.0

Summary

Detected

  • Services:
  • Permissions:
  • Data Handling: pii

Undeclared

All items declared

Warnings

No warnings

Findings (10)

Data Handling

info pii declared
pii-data-reference
prompts/problem-statement-writer.md:16

"Customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
prompts/problem-statement-writer.md:57

"customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
prompts/success-metrics-definer.md:16

"Customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
prompts/user-persona-generator.md:16

"Customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
skills/requirements-structuring.md:41

"User data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
workflows/prd-generator-flow.md:109

"customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

Compliance

info GDPR undeclared
compliance-gdpr
prompts/requirements-prompt.md:91

"- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

info HIPAA undeclared
compliance-hipaa
prompts/requirements-prompt.md:91

"- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

info SOC-2 undeclared
compliance-soc2
prompts/requirements-prompt.md:91

"- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

info GDPR undeclared
compliance-gdpr
skills/requirements-structuring.md:44

"| Compliance | Regulatory and legal | "Data handling complies with GDPR Article 17 (right to erasure"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

Send feedback

Sign in to send feedback — it lets us follow up and keeps the tracker free of spam.