architecture-review
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its automated data ingestion process used to define architectural intent.\n
- Ingestion points: Instructions in SKILL.md and references/interview.md direct the agent to reconstruct the system model by reading files such as README.md, CLAUDE.md, .claude/rules/, Architecture Decision Records (ADRs), and various design documents.\n
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within these ingested documentation files.\n
- Capability inventory: The agent possesses significant analysis capabilities, including file searching, AST parsing, symbol resolution via LSP, and executing git-related commands.\n
- Sanitization: There are no requirements to sanitize or validate the content of these repository files before they are used to influence the architectural scoring and findings triaging process.
Audit Metadata