ideakit
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Standard repository management commands are executed via Bash.
- Employs 'git init' for repository initialization.
- Uses 'git worktree list' for file serial management.
- Offers 'git commit' to persist changes upon user approval.
- [EXTERNAL_DOWNLOADS]: The skill references sibling extensions for research and validation.
- Mentions integration with 'researchkit', 'validatekit', and 'plankit'.
- These are vendor-provided units for specialized functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external web content during research sessions.
- Ingestion points: 'WebSearch' and 'WebFetch' tools are used to gather information.
- Boundary markers: Agent is required to display drafted content in code blocks with absolute paths.
- Capability inventory: Agent has file modification (
Write,Edit) and shell execution (Bash) capabilities. - Sanitization: A strict 'Save, edit, or drop' policy requires explicit user confirmation before any content is saved to the local filesystem.
Audit Metadata