validate-idea
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided ideas to drive a complex validation and prototyping process, which introduces a potential attack surface.
- Ingestion points: The skill accepts untrusted data in the form of an idea provided via the
/validate-ideacommand. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat the user-supplied idea as data rather than instructions.
- Capability inventory: The instructions direct the agent to "Build the prototype" using "real data, real APIs, real output," which involves code execution and potentially network operations if those tools are available to the agent.
- Sanitization: The skill lacks mechanisms to sanitize or validate the user-provided idea before it is used to influence the agent's downstream actions (Phases 1-5).
Audit Metadata