CtrlK
BlogDocsLog inGet started
Tessl Logo

brainstorm

Dual-mode brainstorming pipeline. Auto mode: framework generation → parallel role analysis (spawn_agents_on_csv) → cross-role synthesis. Single role mode: individual role analysis. CSV-driven parallel coordination with NDJSON discovery board.

46

Quality

36%

Does it follow best practices?

Impact

Pending

No eval scenarios have been run

SecuritybySnyk

Critical

Do not install without reviewing

Optimize this skill with Tessl

npx tessl skill review --optimize ./.codex/skills/brainstorm/SKILL.md
SKILL.md
Quality
Evals
Security

Security

1 critical severity finding. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.

Critical

E004: Prompt injection detected in skill instructions

What this means

Detected a prompt injection in the skill instructions. The skill contains hidden or deceptive instructions that fall outside its stated purpose and attempt to override the agent’s safety guidelines or intended behavior.

Why it was flagged

Potential prompt injection detected (high risk: 1.00). The skill claims it "NEVER executes code or modifies source files" but contains explicit executable directives (Bash commands, Write calls, spawn_agent/spawn_agents_on_csv, and reads of project files) that perform filesystem I/O and spawn agents — a clear contradiction and hidden/deceptive behavior outside its stated read-only brainstorming purpose.

Report incorrect finding
Repository
catlog22/Claude-Code-Workflow
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.