104-backend-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from project documentation and source code to generate its output.\n
- Ingestion points: The skill reads context from existing documents (D01, D02, D03) and explores the repository codebase using the
@exploretool as specified in SKILL.md Steps 2 and 3.\n - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potential malicious prompts embedded within the files being analyzed.\n
- Capability inventory: The skill has the capability to write the generated architecture document to the file system at
.specflow/docs/D04-backend-architecture.mdas described in Step 6.\n - Sanitization: No input validation, escaping, or sanitization processes are defined for content retrieved from the repository or external documentation before interpolation.
Audit Metadata