product-design-ideate

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The file references/local-prototype-preflight.md directs the agent to execute a local bootstrap script (bootstrap-prototype.mjs) using Node.js. This command is used to initialize the directory structure for new design prototypes within the local workspace.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npm install during the prototype setup process to fetch necessary development dependencies. This is a standard operation for initializing the project's environment.
  • [PROMPT_INJECTION]: The skill defines "Critical Overrides" and a "Design Brief Gate" in references/critical-overrides.md. These instructions act as internal process controls, requiring the agent to play back and confirm requirements with the user before generating code or images, which serves as a safeguard against misinterpreting or overstepping user intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 06:05 PM
Security Audit — agent-trust-hub — product-design-ideate