idea-refine
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script (
scripts/idea-refine.sh) to initialize a directory for storing ideas. The script uses themkdir -pcommand to create adocs/ideasdirectory if it does not already exist. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input from
$ARGUMENTSand local project files using tools likeGlob,Grep, andRead. - Ingestion points: Data enters the agent context via user-supplied arguments and automated scanning of the local codebase as described in
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined in
SKILL.mdto separate external data from system instructions. - Capability inventory: The agent can execute a local bash script (
scripts/idea-refine.sh) which usesmkdir, read files, search project contents, and write refined concepts to markdown files in thedocs/ideas/directory (SKILL.md). - Sanitization: The skill instructions do not specify sanitization, validation, or filtering logic for the content it ingests from external project files or user input.
Audit Metadata