idea-shortlist-curator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/run.pyuses dynamic path calculation to locate the repository root and modifiessys.pathto import local utility modules. This enables the skill to access shared project libraries but involves runtime modification of the execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests data from external JSONL files and incorporates that data into markdown reports without sanitization. 1. Ingestion points:
scripts/run.pyreads direction data fromIDEA_DIRECTION_POOL.jsonlandIDEA_SCREENING_TABLE.jsonl. 2. Boundary markers: The skill does not use specific delimiters or instructions to prevent the agent from following directions potentially embedded within the input data. 3. Capability inventory: The script performs file system operations (write_markdown,write_jsonl) inscripts/run.pyto save the results to the workspace. 4. Sanitization: No escaping or validation is performed on the data fields before they are interpolated into the rationale templates.
Audit Metadata