manage-product-ideas
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze potentially untrusted data from the repository, customer feedback, and operational sources, creating an attack surface for indirect prompt injection.
- Ingestion points: SKILL.md directs the agent to inspect repository evidence, product/customer data, and operational sources to inform product decisions.
- Boundary markers: The instructions do not define clear delimiters or provide instructions to the agent to disregard instructions embedded within the source data.
- Capability inventory: The skill utilizes file reading capabilities to gather context and file writing capabilities to update product idea documentation in the docs/product-ideas/ directory.
- Sanitization: There are no requirements or methods specified for sanitizing or validating the data before it is incorporated into the agent's decision-making process.
Audit Metadata