What is prd-generator?

A tool that turns a plain-language feature idea into a security-focused PRD, or Product Requirements Document. A PRD explains what a product or feature must do and records its requirements and stakeholders.

Use it to create product specs, feature requirements, and security-aware PRDs from a short description.

It helps turn an informal idea into a shared document with clearer requirements and security considerations. It can also prepare the document for team communication through configured work tools.

prd-generator — Skill for Claude Code by Security-Phoenix-demo

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add Security-Phoenix-demo/security-skills-claude-code --skill prd-generator

Clone the repo

git clone --depth 1 https://github.com/Security-Phoenix-demo/security-skills-claude-code

Made for: Claude Code.

Or install phoenix-prd-pipeline, the plugin that ships this one along with the rest of its 13 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/security-phoenix-demo/security-skills-claude-code/prd-generator/github.svg)](https://agentmods.dev/skills/security-phoenix-demo/security-skills-claude-code/prd-generator)

Your own site

<a href="https://agentmods.dev/skills/security-phoenix-demo/security-skills-claude-code/prd-generator"><img src="https://agentmods.dev/badge/skills/security-phoenix-demo/security-skills-claude-code/prd-generator/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/security-phoenix-demo/security-skills-claude-code/prd-generator"><img src="https://agentmods.dev/badge/skills/security-phoenix-demo/security-skills-claude-code/prd-generator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 178 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,584 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00178	$0.03584
Opus 5.5	$0.00071	$0.01434
Sonnet 5.5	$0.00036	$0.00717
Haiku 4.5	$0.00018	$0.00358

Measured 1mo ago against content hash 24f5db1cae65, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

prd-generator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/phoenix-prd-pipeline/skills/prd-generator/SKILL.md · 459 lines

How it starts

The opening of the file, as written. The whole thing — 459 lines — stays where its author put it; the contents beside it link to each section on GitHub.

PRD Generator — Security-Focused

What this skill can talk to

None of these are required — the PRD is produced either way, and a missing connector degrades to a local file rather than an error.

MCP connector	Used for	Priority
Atlassian	Confluence page creation	Primary — always attempt
Slack	Stakeholder notification	Optional
Linear	Batch plan → tickets	Optional
Asana	Batch plan → tasks	Optional
Notion	Mirror doc	Optional
Gmail	Send the PRD to stakeholders	Optional

Tools it expects: present_files, create_file, bash_tool.

This list used to live in a compatibility: frontmatter key. The Agent Skills spec allows only name, description and allowed-tools, and any extra key makes the claude.ai upload fail with a hard error instead of being ignored — so it belongs in the body.

Customization (Required on First Use)

Before generating your first PRD, Claude will ask you to provide the following settings. These are used throughout the pipeline and in all outputs.

Setting	Description	Example
Owner name	Name(s) shown as PRD owner in all outputs	`@jane.doe / @john.smith`
Default stakeholders	Interested parties added to every PRD	`@product-team`, `@security-lead`
Confluence space key	Your Atlassian Confluence space for PRD pages	`ENG`, `PRODUCT`, `SEC`
Confluence template title	Parent page title to nest PRDs under	`PRD Templates`, `Product Specs`
Slack channel	Default channel for PRD notifications (optional)	`#product-specs`, `#security-reviews`
Email recipients	Default stakeholder emails for Gmail drafts (optional)	`[email protected]`

How to configure:

Interactive (recommended): The first time you use this skill, Claude will ask you for these values before generating the PRD. Your answers are used for that session.

Environment variables: For persistent configuration, set these in your shell profile or .env:

export PRD_OWNER="@your-name"
export PRD_STAKEHOLDERS="@stakeholder1, @stakeholder2"
export PRD_CONFLUENCE_SPACE="YOUR_SPACE_KEY"
export PRD_CONFLUENCE_TEMPLATE="Your Template Page Title"
export PRD_SLACK_CHANNEL="#your-channel"

Read the full file on GitHub · 459 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago Changed · +9 lines 24f5db1cae65
1mo ago First seen · 450 lines · 178 tokens per session scan A ad64968d5dd2

Subscribe to this mod's changes

prd-generator is a skill published in the GitHub repository Security-Phoenix-demo/security-skills-claude-code (81 stars, last pushed 5d ago), licensed MIT. It adds 178 tokens to every session and 3,584 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-11.

Planning Writing and docs

prd-generator next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
prd-generatorSecurity-Phoenix-demo/security-skills-claude-code	Skill	81	5d ago	MIT	A	178	Claude Code
imagegenopenai/codex	Skill	133k	yesterday	Apache-2.0	A	113	Codex
playwright-climicrosoft/playwright	Skill	99k	yesterday	Apache-2.0	A	19	Claude Code
local-ai-agentsmicrosoft/ai-agents-for-beginners	Skill	79k	4d ago	MIT	A	200	Claude Code, Codex
systematic-debuggingobra/superpowers	Skill	313k	3d ago	MIT	A	21	Claude Code
next-cache-components-adoptionvercel/next.js	Skill	143k	yesterday	MIT	A	95	Claude Code
next-partial-prefetching-adoptionvercel/next.js	Skill	143k	yesterday	MIT	A	103	Claude Code