ideation-engine
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from workshop results (pasted text, exports, or transcriptions). It mitigates risk by instructing the agent to treat this input strictly as data and never as instructions, specifically identifying and reporting any attempts to command the agent within the input data.
- [COMMAND_EXECUTION]: The documentation includes
npxcommands to install additional skills from the author's official package (pedroromeroluna/ai-first-product-skills). These are documented installation steps for the vendor's toolkit.
Audit Metadata