idea-memo-writer
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/run.pydynamically calculates the repository root by traversing parent directories for anAGENTS.mdfile and appends this path tosys.pathto import local tooling modules. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from files such as
IDEA_SHORTLIST.jsonlandGOAL.mdto populate report content. While this creates a potential surface for indirect injection if downstream agents read the generated reports, the skill itself does not execute or interpret the data as instructions. - [COMMAND_EXECUTION]: The skill performs legitimate file system operations, including reading CSV/JSONL files and writing generated Markdown and JSON payloads to the specified workspace directory.
Audit Metadata