brainstorm
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface by ingesting content from the local codebase during the discovery phase to map the current state of a project.
- Ingestion points: Codebase exploration is performed in the discovery phase as described in
references/discovery.md. - Boundary markers: While explicit delimiters for code content are absent, the process is gated by a mandatory summary-and-confirm step with the user before advancing.
- Capability inventory: The skill uses file-read capabilities to explore the project (references/discovery.md) and file-write capabilities to save the final artifact to
docs/product/brainstorm.md(references/capture.md). - Sanitization: The
references/capture.mdfile contains strict instructions to exclude codebase symbols, function names, and file paths from the final artifact, ensuring technical details do not leak into the conceptual brainstorming document. - [SAFE]: The skill does not contain any obfuscated code, hardcoded credentials, or network-enabled tools. All external data handling is restricted to the local filesystem for the purpose of project documentation.
Audit Metadata