growth-ideas
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted user descriptions and includes them in the data processed for the webview.
- Ingestion points: User input for product descriptions and stages provided in SKILL.md are passed to the agent and subsequently used to generate growth ideas.
- Boundary markers: Absent. The skill instructions do not define clear delimiters or provide instructions for the agent to ignore potentially malicious embedded content within the user-provided descriptions.
- Capability inventory: The skill uses the
run_jstool inscripts/index.htmlto generate a URL for a dynamic webview and renders output inassets/webview.html. - Sanitization: Absent. In
assets/webview.html, theinnerHTMLproperty is used to inject theidea-titleandidea-descfields into the document object model. This allows for the execution of arbitrary HTML or JavaScript if the agent-generated content includes malicious payloads originating from user input.
Audit Metadata