review-service-architecture
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes untrusted data from the repository being reviewed.
- Ingestion points: The skill reads repository guidance, project context, ADRs, documentation, and source code in SKILL.md (Steps 1 and 2).
- Boundary markers: No specific delimiters or 'ignore' instructions are provided to prevent the agent from following instructions embedded within the analyzed files.
- Capability inventory: The skill can write architectural reports and migration plans to the .agents/projects/ directory and invoke secondary tools like domain-modeling and codebase-design.
- Sanitization: No explicit sanitization or validation of the repository content is described before processing.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development tools for codebase assessment.
- Evidence: GOLANG.md directs the agent to run gofmt, go vet, staticcheck, govulncheck, and go test -race on the target repository.
Audit Metadata