idea-validator

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Git commands to synchronize the local state with the remote repository. These commands include git rev-parse, git fetch, git pull --rebase, git stash, and git push, which are used to maintain project consistency during the validation process.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input and external data from web search results to generate its reports.\n
  • Ingestion points: The skill accepts idea descriptions via the $ARGUMENTS variable and retrieves competitor data through the WebSearch tool.\n
  • Boundary markers: The agent is guided by a specific 5-phase pipeline (Clarify, Technical Context, Competitive Research, Evaluation, and Improvements) which provides structural constraints on how the agent processes information.\n
  • Capability inventory: The skill performs file system write operations, web search queries, and local Git repository management.\n
  • Sanitization: The instructions explicitly direct the agent to provide a 'Critical Evaluation' and 'honest feedback', which encourages the model to evaluate the data objectively rather than treating embedded content as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 05:25 PM
Security Audit — agent-trust-hub — idea-validator