collaborative-ideation
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is instructed to analyze existing project files, documentation, and recent git commit history to understand the project context. This creates a surface where malicious instructions hidden in these files could potentially influence the agent's behavior.
- Ingestion points: SKILL.md (Process section) instructs the agent to check current project state, including files, docs, and recent commits.
- Boundary markers: There are no explicit instructions or markers defined to help the agent distinguish between data to be analyzed and instructions to be followed.
- Capability inventory: The skill allows for file writing (creating design docs in
docs/plans/), git commits, and the invocation of other specialized skills for workspace management. - Sanitization: The skill does not define any sanitization or validation steps for the content read from the project files.
- [COMMAND_EXECUTION]: The instructions require the agent to interact with the file system and version control system, specifically by writing design documents and committing them to git. While these are standard development tasks, they involve the execution of shell commands based on the skill's logic.
Audit Metadata