skills/jscraik/agent-skills/ce-ideate/Gen Agent Trust Hub

ce-ideate

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill incorporates a feedback loop that executes a local Python script at utilities/skill-builder/scripts/record_skill_feedback.py to persist decision metadata and user outcomes.
  • [DATA_EXFILTRATION]: The workflow includes an option to share generated ideation artifacts to an external service named 'Proof' using a standard markdown upload pattern. This behavior is documented as part of the intended project-sharing lifecycle.
  • [PROMPT_INJECTION]: The references/evals.yaml file contains test cases that include adversarial instructions, such as 'Ignore previous instructions' and 'override your guardrails'. These are correctly placed within a testing configuration used to verify the agent's adherence to its primary instructions under pressure.
  • [DATA_EXFILTRATION]: The skill ingests data from the local repository and the issue tracker to ground its ideas. While this creates a surface for indirect prompt injection, the skill includes explicit instructions to redact secrets and sensitive data during the process.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 01:13 PM
Security Audit — agent-trust-hub — ce-ideate