idea-to-design-doc
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input and incorporates it into generated design documents, which are saved to the local file system. This creates a surface where malicious instructions provided by a user (or embedded in a retrieved idea) could influence the agent's behavior during document generation.
- Ingestion points: User responses during the guided interview described in
SKILL.md. - Boundary markers: The skill does not employ specific delimiters or 'ignore embedded instructions' warnings for user-supplied content.
- Capability inventory: The skill is instructed to write files to the
./ideas/directory. - Sanitization: No sanitization or validation of user-provided content is defined before the Markdown note is drafted.
Audit Metadata