Agent skill · Audited from source

Idea Brief

skill · WILLOSCAR/research-units-pipeline-skillsLicence not declaredAudited 14 Oct 2026 · source 81994516a430

★ 514pushed 9 days ago

✓SAFEGrade B · 89/100 · 14 Oct 2026 · 8199451

514repo stars · whole WILLOSCAR/research-units-pipeline-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 81994516a430 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Lock an ideation run into a single-source-of-truth brainstorm brief (`output/trace/IDEA_BRIEF.md`) and a replayable multi-query plan (`queries.md`).

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “Idea Brief (WILLOSCAR/research-units-pipeline-skills)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/willoscar/idea-brief

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score89/100✓SAFE B

0 critical0 high1 medium1 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

FilesystemNone observedNo reads or writes in the source
NetworkNone observedNo outbound calls in the source
ShellNone observedNo commands run in the source
DependenciesPinnedNothing floats
SecretsNone foundNo keys in source

Five audit layers

Layer	What we check	Result	Findings
`L0` Provenance	Repo owner, licence, archive status, activity	WARN	2
`L1` Static source	Secrets, path traversal, supply chain, hidden code	PASS	0
`L2` Instructions	Prompt injection, authority framing, hidden directives	PASS	0
`L3` Inventory	The files and declarations match the source	PASS	0
`L4` Sandbox	Run in isolation and watch behaviour	SKIPPED why	0

Gates applied: no behavioural pass, no license.

Findings (2)

MEDIUMInventory / provenanceinv.symlink · .claude/skills

F-13 Inventory / provenanceCWE-1104Layer L0

.claude/skills

Why: link not followed
Fix: —

LOWInventory / provenanceinv.no_license

F-13 Inventory / provenanceCWE-1104Layer L0

Why: no LICENSE file and no repo licence
Fix: add a licence

Audit 0.4.1 · source sha 81994516a430 · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

PublisherWILLOSCAR GitHub userOwner of the repository this skill is read from
Source folderWILLOSCAR/research-units-pipeline-skills/.codex/skills/idea-briefThe exact folder we audited
LicenceNot declaredAs the repository states it
Commit pinned for this verdict81994516a430A new audit runs when the source changes
Repository statusNot archivedLast push 9 days ago
Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Lock an ideation run into a single-source-of-truth brainstorm brief (`output/trace/IDEA_BRIEF.md`) and a replayable multi-query plan (`queries.md`).

---
name: idea-brief
description: "Lock an ideation run into a single-source-of-truth brainstorm brief (`output/trace/IDEA_BRIEF.md`) and a replayable multi-query plan (`queries.md`)."
---

# Idea Brief

## Triggers & routing

- **Trigger**: idea brief, ideation brief, research ideas, brainstorm, 找 idea, 选题, 点子, 找方向.
- **Use when**: the user wants research ideas and their input is long / multi-turn; you need to clarify topic + constraints before retrieval.


Turn a fuzzy ideation request into an auditable brainstorm contract for the later ideation stack.

This skill does **not** retrieve papers.
It only locks topic, audience, constraints, exclusions, rubric, query buckets, and target artifact shape into:

- `output/trace/IDEA_BRIEF.md`
- `queries.md`
- `DECISIONS.md`

## Inputs
- `GOAL.md`
- `DECISIONS.md`
- `queries.md`

## Outputs
- `output/trace/IDEA_BRIEF.md`
- `queries.md`
- `DECISIONS.md`

## Execution notes

This skill starts from `GOAL.md`, then refines the topic/constraints into `output/trace/IDEA_BRIEF.md`, updates `queries.md`, and records blockers or approvals in `DECISIONS.md`.

Read `references/overview.md` before changing the package shape or the brief contract.
`assets/brief_contract.json` is the machine-readable source for:

- required brief sections
- goal / audience framing
- rubric rows
- query bucket templates
- default exclusions
- focus placeholder
- shared table/open-question text
- decisions bootstrap text

## Script

### Quick Start

- `uv run python .codex/skills/idea-brief/scripts/run.py --workspace <workspace>`

### All Options

- `--workspace <dir>`
- `--unit-id <id>`
- `--inputs <a;b;...>`
- `--outputs <a;b;...>`
- `--checkpoint <C*>`

### Examples

- `uv run python .codex/skills/idea-brief/scripts/run.py --workspace <workspace>`

Excerpt, first 1,790 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 8199451

Download folder ↗

git clone https://github.com/WILLOSCAR/research-units-pipeline-skills
git -C research-units-pipeline-skills checkout 81994516a430

The author documents no install command, so this uses the repository directly. Our verdict covers commit 81994516a430 only.

Works in which agents?

What its own text says, not a test

“Mentioned” means the skill’s text names the agent. We have not run it there.
Agent	Status	More
Codex	Mentioned in its text, not tested	Skills for Codex · About Codex

Audit history

Every audit, every source change

2026-10-14
✓SAFE B 89 / 100
first audit · source 81994516a430

README badge

For maintainers · shows the latest audit

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/willoscar/idea-brief/badge.svg)](https://modelsatlas.com/skills/willoscar/idea-brief/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.