research-ideation
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes content from external research papers fetched via the paper-navigator dependency to generate research ideas and trees.
- Ingestion points: External research paper metadata and full text retrieved via paper-navigator scripts, and local memory files located at /memory/ideation-memory.md.
- Boundary markers: There are no instructions to delimit or specifically handle potentially malicious instructions embedded in the external research content.
- Capability inventory: The skill has access to powerful tools including write_file, edit_file, read_file, think_tool, and execute.
- Sanitization: The skill lacks sanitization or validation routines for data processed from external sources before it is used in subsequent reasoning steps.
- [NO_CODE]: This skill contains only markdown files and does not ship with any executable scripts, binary files, or source code.
Audit Metadata