Back to PRD Generator Flow

Security Report

PRD Generator Flow

Pass
Version v1.1.27 Scanned 7 June 2026 at 10:28 Scanner v3.3.0

Summary

Detected

  • Services: llm-service
  • Permissions:
  • Data Handling: pii

Undeclared

All items declared

Warnings

No warnings

Findings (10)

Data Handling

info pii declared
pii-data-reference
prompts/problem-statement-writer.md:16

"Customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
prompts/problem-statement-writer.md:57

"customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
prompts/success-metrics-definer.md:16

"Customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
prompts/user-persona-generator.md:16

"Customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-data-reference
workflows/prd-generator-flow.md:109

"customer data"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

Compliance

info GDPR undeclared
compliance-gdpr
prompts/requirements-prompt.md:91

"- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

info HIPAA undeclared
compliance-hipaa
prompts/requirements-prompt.md:91

"- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

info SOC-2 undeclared
compliance-soc2
prompts/requirements-prompt.md:91

"- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"

This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.

Services

info llm-service declared
frontmatter-service-connection
skills/technical-scoping.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
workflows/prd-generator-flow.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

Send feedback

Sign in to send feedback — it lets us follow up and keeps the tracker free of spam.