architecture-hardening-loop
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill instructions explicitly mandate the exclusion of secrets, credentials, and local-only paths from the scanning and processing path set. This prevents accidental exposure of sensitive environment data during the code analysis phase.
- [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on other modular skills, such as
improve-codebase-architectureandagentic-review-handoff. It provides clear instructions for the user to install these dependencies manually vianpx skills addfrom a trusted vendor repository, avoiding unauthorized or silent remote code fetching. - [DYNAMIC_EXECUTION]: The skill is designed to perform code modifications and run verification tests. This is controlled by a multi-layered review cycle involving an automated reviewer (Grok) and strict 'Architecture Fix' admission criteria, ensuring changes are minimal, evidence-backed, and verified by tests before proceeding.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external attachments and git references to determine the code scope. It includes a specific security instruction to treat attachments strictly as data and never execute instructions found within them, which mitigates attacks where malicious code instructions are embedded in source files or metadata.
- [COMMAND_EXECUTION]: The skill utilizes read-only Git commands (e.g.,
git log,git show,git status) to resolve the code scope from user input. These operations are scoped to identifying file paths and commit metadata within the local repository environment.
Audit Metadata