PRD-Writer

基于三阶段工作流与 MoSCoW 优先级，生成结构化产品需求文档（PRD），支持从零撰写、优化和文档转PRD。

This skill appears to do what it says (PRD templates + chart generation) but check a few things before use: 1) Confirm how Feishu integration works — who provides feishu_fetch_doc and where credentials live; do not hand over Feishu tokens unless you trust the skill/source. 2) Be cautious opening generated HTML attachments: the template loads Mermaid from a CDN and sets mermaid securityLevel to 'loose' with htmlLabels enabled, which can let user-supplied content execute in your browser. Prefer an offline/bundled Mermaid script or change securityLevel to 'strict' and disable html labels. 3) Ask the publisher for a homepage or source code repo (none provided) and a clear statement about network usage and where files are uploaded. 4) Avoid using the skill with confidential data until you confirm Feishu upload behavior and sanitize inputs used in Mermaid diagrams. If you want stronger assurance, request the author remove CDN usage or provide a verifiable source for the templates and integration code.

Type: OpenClaw Skill Name: prd-assistant Version: 3.0.0 The prd-assistant skill bundle is a legitimate tool designed to help users generate structured Product Requirement Documents (PRDs). It follows a clear three-stage workflow (Context Gathering, Refinement, and Reader Testing) and provides templates for various PRD sections, including Mermaid diagrams and a five-party review process. The use of an external CDN for Mermaid rendering in 'mermaid_template.html' and the 'feishu_fetch_doc' tool call are consistent with the stated functionality of document generation and analysis. No evidence of malicious intent, data exfiltration, or unauthorized command execution was found.