idea-validation
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a logical process for research, analysis, and reporting without any dangerous execution patterns or credential access.
- [INDIRECT_PROMPT_INJECTION]: The skill utilizes
WebSearchandWebFetchto ingest untrusted data from the internet. While this creates a surface for indirect prompt injection, the skill's explicit instructions to maintain a 'brutally honest' and 'harsh' analytical posture serve as a natural defense against following biased or malicious instructions found in external content. - Ingestion points: External data enters through
WebSearchandWebFetchoperations defined inSKILL.md. - Boundary markers: None explicitly defined for untrusted data processing.
- Capability inventory: The agent can use
Readto access local framework files and write reports to the project's03-validation/folder. - Sanitization: No explicit sanitization of web content is specified before report generation.
Audit Metadata