qcsd-ideation-swarm
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from external URLs to detect project flags and perform detailed quality and risk assessments.
- Ingestion points: External content is fetched during Step 1 (via
steps/01-flag-detection.mdand a referenced URL fetch cascade) and is subsequently processed by three core agents and up to six conditional agents. - Boundary markers: The instructions do not specify the use of delimiters or clear boundaries to isolate external content from the agent's system instructions.
- Capability inventory: The skill possesses file-system write capabilities (saving reports to
OUTPUT_FOLDER) and executes a local CLI tool (aqe) for persistence. - Sanitization: There is no evidence of sanitization or escaping of the fetched URL content before it is passed to the sub-agents for analysis.
- [COMMAND_EXECUTION]: The skill executes local commands and scripts as part of its operational workflow.
- Evidence: Step 7 (
steps/07-learning-persistence.md) invokes theaqe memory storecommand to persist findings to a local memory store. Additionally, the skill's changelog references an automated browser cascade executed viascripts/fetch-content.js.
Audit Metadata