brainstorming
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
scripts/start-server.sh,scripts/stop-server.sh) to launch and manage a custom Node.js web server (scripts/server.cjs) for the visual companion feature. - [INDIRECT_PROMPT_INJECTION]: The brainstorming process reads interaction events (like clicks and choices) from a locally stored JSON file (
$STATE_DIR/events) generated by the user's browser via the visual companion. - Ingestion points: Data is ingested from interaction logs at
$STATE_DIR/events. - Boundary markers: The data is handled as structured JSON, though no additional text-based safety delimiters are defined.
- Capability inventory: The skill manages a local server process and writes HTML files to a session directory.
- Sanitization: The server implementation uses
path.basenameto prevent directory traversal and performs JSON validation on browser-to-server messages.
Audit Metadata