skills/npow/claude-skills/deep-idea/Gen Agent Trust Hub

deep-idea

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as a structured ideation framework with no execution of untrusted code, network exfiltration of sensitive data, or privilege escalation attempts.
  • [NO_CODE]: The skill does not contain executable scripts or binary files; it consists entirely of markdown-based instructions for orchestrating AI agent workflows.
  • [PROMPT_INJECTION]: The skill contains explicit instructions to treat user-provided domain and constraint strings as untrusted data, specifically advising agents to use safe delimiting to prevent instructions from being overridden.
  • [EXTERNAL_DOWNLOADS]: While the skill uses WebSearch and WebFetch tools for prior-art verification, these are scoped to its primary purpose (novelty checking) and target standard, well-known platforms like GitHub, ProductHunt, and academic databases. No downloads from suspicious or untrusted sources are present.
  • [DYNAMIC_EXECUTION]: There are no patterns of dynamic code generation or execution. The 'mutation loop' refers to shifting instructional strategies (e.g., changing the generation mechanism), not modifying code at runtime.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for external data (web search results for prior-art). However, it implements a robust multi-agent 'judge and jury' architecture with independent contexts for each phase, minimizing the risk that embedded instructions in a search result could influence the overall system state or user environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 08:42 PM