architecture-state
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The analysis did not detect any malicious behavior, hardcoded credentials, or unauthorized network activity. The skill's operations are confined to analyzing project structure and metadata.
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes project files that could contain malicious instructions. This is a characteristic of analysis tools and is documented here for completeness.
- Ingestion points: The skill reads configuration files, manifests, and READMEs as specified in the Detection Checklist (SKILL.md).
- Boundary markers: No explicit delimiters or warnings are used to wrap ingested file content.
- Capability inventory: The agent's capabilities are focused on reading local files and generating structured YAML and table reports.
- Sanitization: No explicit sanitization or filtering of the analyzed content is described in the instructions.
- [COMMAND_EXECUTION]: The skill mentions various developer tools such as Maven, Gradle, npm, and poetry in the context of architecture detection. The instructions guide the agent to identify these tools and suggest verify commands for fitness functions to the user; it does not command the agent to execute these tools directly in a dangerous manner.
Audit Metadata