idea-validation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external web sources.
- Ingestion points: The skill uses
WebSearchandWebFetchto retrieve information from Reddit, forums, and competitor websites as part of its 'Problem Check' and 'Competitor Check' steps inSKILL.md. - Boundary markers: There are no explicit markers or instructions to the model to treat content from the web search or fetch tools as potentially untrustworthy or to ignore embedded instructions within that data.
- Capability inventory: The skill utilizes
WebSearch,WebFetch,Readtools, and includes instructions to save output to the project's file system (03-validation/folder). - Sanitization: The instructions do not define any sanitization, filtering, or validation steps for the content fetched from external domains.
Audit Metadata