create-prd

create-prd is a command for coding agents from ihudak/ihudak-claude-plugins. It costs 0 tokens per session (17,884 once invoked), scanned A, original, MIT.

A workflow for writing a Product Requirements Document, or PRD—a document that explains what should be built, why, and for whom. It starts from a refined idea and a Jira work-item key.

In plain words
What is it for?
Use it to create a PRD in lean, hybrid, or full form, optionally using prior documents and research references. The result is authored as Markdown for later transfer to Jira.
Why use it?
It turns an idea into a structured product document that can guide later planning and implementation, while checking it against a required format and reference material.

Command

Installs and runs on its own, but its text points at files inside its plugin — anything it tells you to read at a ${CLAUDE_PLUGIN_ROOT} path is only there once the plugin is installed. Installing the plugin gets both.

Part of the dev-workflows plugin — 2 skills, 28 commands, 38 agents, 3 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/ihudak/ihudak-claude-plugins/create-prd
Clone the repo
git clone --depth 1 https://github.com/ihudak/ihudak-claude-plugins

Or install dev-workflows, the plugin that ships this one along with the rest of its 2 skills, 28 commands, 38 agents, 3 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for create-prd

README.md
[![agentmods](https://agentmods.dev/badge/commands/ihudak/ihudak-claude-plugins/create-prd.svg)](https://agentmods.dev/commands/ihudak/ihudak-claude-plugins/create-prd)
Your own site
<a href="https://agentmods.dev/commands/ihudak/ihudak-claude-plugins/create-prd"><img src="https://agentmods.dev/badge/commands/ihudak/ihudak-claude-plugins/create-prd.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 17,884 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.17884
Opus 5 $0.00000 $0.08942
Sonnet 5 $0.00000 $0.03577
Haiku 4.5 $0.00000 $0.01788

Measured today against content hash 904ac36929ba, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

create-prd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/dev-workflows/commands/create-prd.md · 665 lines

How it starts

The opening of the file, as written. The whole thing — 665 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Author a Product Requirements Document: $ARGUMENTS

/create-prd is sub-project 2 of the PRD-creation flow (PM phase) — it consumes the idea.md from /idea and a user-supplied address and authors a high-quality Product Requirements Document that feeds the downstream pipeline. The PRD is product-level (a PRD): what / why / for-whom, not how. Zero external calls — the PRD is authored as markdown in the specs repo, which is where every downstream command reads it from.

Usage: /create-prd <ADDRESS> [@idea.md] [--from-prd <PRD-KEY|path>] [--lean|--hybrid|--full] [--no-docs] (default --hybrid, or --full on the BRD route — Phase 0 step 2; the two --no-* switches each turn off one grounding source — see Phase 1).


Phase 0 — Resolve inputs

  1. The address (mandatory). Parse the first non-flag token and validate it with key-valid (${CLAUDE_PLUGIN_ROOT}/references/addressing.md §1). If absent or malformed, stop gracefully with the one CREATE_PRD_NEEDS_KEY text below — there is one stop for this code, not two. (Shape only, and never checked against anything: the key is the operator's own and names a folder in $SPECS_PATH; nothing mints it and nothing verifies it.)

    The BRD route is detected, not declared. A folder carrying brd-link.md was produced by /brd-split and holds the seeds this command reads; the operator restates nothing on the command line, and there is no flag that could disagree with the folder it names. Detection therefore waits on resolution. The address is resolved once, with resolve-address (step 5), and that resolution is taken as soon as step 2b has settled $SPECS_PATH — ahead of step 2's profile default and step 3's ladder, both of which read the route. Print which route the run entered at that point, before any other work. Where the address resolves to nothing there is no folder and no brd-link.md to read one off, so the run is on the idea route; step 5 says what happens then, and it is not a stop. A key that fails §1's grammar stops with CREATE_PRD_NEEDS_KEY: /create-prd needs an address (^[A-Z][A-Z0-9_]*(-\d+)+$, e.g. EPIC-008 or the slice EPIC-008-01) — re-run '/dev-workflows:create-prd <ADDRESS>'.

  2. Profile. --lean | --hybrid | --full; default --hybridor --full when the BRD route is present and no profile flag was given, per the design's Profile default section (§7.4): that profile is the one carrying ## Functional requirements ([FR#N]), ## API specification, ## UX prototype / UI mockups and the full ## Assumptions & open questions Contradictions Log, so considerably more BRD-derived content has a legitimate product-altitude home than --hybrid allows. An explicit --lean/--hybrid still wins: the default is a default, not an override. 2a. --from-prd <PRD-KEY|path> (optional seed). When present, this run authors a new PRD (the positional <KEY>) seeded read-only by another PRD. Resolve the seed via resolve-address (${CLAUDE_PLUGIN_ROOT}/references/addressing.md §3) and read that folder's prd.md for a key, or read the given path directly. The seed is grounding, not content (Phase 3 adapts it; it is never copied wholesale).

2b. $SPECS_PATH, then the specs-repo preflight — both before step 3's gate. If $SPECS_PATH is unset, stop naming it (choices: ["Set SPECS_PATH (enter the path)", "Cancel"]). Then cite ${CLAUDE_PLUGIN_ROOT}/references/specs-repo-git.md and execute its specs-preflight entry point (§3) inline: flush any leftover session artifacts from an earlier run, retry an artifact commit that failed to push, and settle the branch. Prompt-free and silent when the specs repo is clean and on its default branch. If a guard fires, emit its §5 notice; if it returns specs_git: blocked (§3.3 G0), carry that flag for the whole run — the terminal commit-artifacts step skips on it.

**The ordering is the point, not the tidiness.** Step 3's `require-on-main` performs no fetch of
its own (`${CLAUDE_PLUGIN_ROOT}/references/phase-handoff.md` §3), so without the preflight's
best-effort fetch ahead of it a merged `idea.md` reads as "on a branch and never handed off" and
the run hard-stops on work that is already on the default branch. This command was for a time the
only one of the twenty-four `commit-artifacts` callers running no preflight — deleted as
collateral with an adjacent paragraph — which also left `specs_git: blocked` unset, so the G0
guard in both `commit-artifacts` and `handoff-to-main` was inert here and a detached-HEAD specs
repo would take this command's commits to an unreachable place and report success.

Read the full file on GitHub · 665 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +34 lines 904ac36929ba
  2. 5d ago First seen · 631 lines · 0 tokens per session scan A 53d475519ce5

Subscribe to this mod's changes

create-prd is a command published in the GitHub repository ihudak/ihudak-claude-plugins (2 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 17,884 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.