ideation-engine

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from workshop results (pasted text, exports, or transcriptions). It mitigates risk by instructing the agent to treat this input strictly as data and never as instructions, specifically identifying and reporting any attempts to command the agent within the input data.
  • [COMMAND_EXECUTION]: The documentation includes npx commands to install additional skills from the author's official package (pedroromeroluna/ai-first-product-skills). These are documented installation steps for the vendor's toolkit.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 07:07 PM