idea-validator
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands to synchronize the local state with the remote repository. These commands include
git rev-parse,git fetch,git pull --rebase,git stash, andgit push, which are used to maintain project consistency during the validation process.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input and external data from web search results to generate its reports.\n - Ingestion points: The skill accepts idea descriptions via the
$ARGUMENTSvariable and retrieves competitor data through theWebSearchtool.\n - Boundary markers: The agent is guided by a specific 5-phase pipeline (Clarify, Technical Context, Competitive Research, Evaluation, and Improvements) which provides structural constraints on how the agent processes information.\n
- Capability inventory: The skill performs file system write operations, web search queries, and local Git repository management.\n
- Sanitization: The instructions explicitly direct the agent to provide a 'Critical Evaluation' and 'honest feedback', which encourages the model to evaluate the data objectively rather than treating embedded content as instructions.
Audit Metadata