ideator
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns such as obfuscation, credential harvesting, or remote code execution were detected. The skill's functionality is strictly limited to information gathering and documentation through local file operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input to generate a project brief, creating a potential surface for indirect prompt injection where a user could provide input designed to influence downstream agents.
- Ingestion points: User chat responses provided during the Problem, Scope, and Constraints phases (SKILL.md).
- Boundary markers: Absent; user input is directly interpolated into the template sections.
- Capability inventory: The skill uses file system tools (read, write, edit, grep, glob) but does not have network access or code execution capabilities.
- Sanitization: No sanitization or validation is implemented for user-provided text before it is written to the project-brief.md artifact.
Audit Metadata