avonni-architect
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform environment checks by executing
node --versionandsf --versionto ensure the required runtime and CLI tools are available and meet the minimum version requirements.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to guide users in installing necessary sub-skills through the commandnpx skills avonni/skills, which involves fetching packages from the vendor's repository.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes data from external tool outputs to build architecture plans.\n - Ingestion points: Untrusted data enters the agent context via the
list_componentsandlist_interactionstool calls to the Avonni MCP server.\n - Boundary markers: There are no explicit delimiters or specific instructions for the agent to disregard potential instructions embedded within the MCP response data.\n
- Capability inventory: The skill allows for command execution (system version checks), dispatching tasks to other skills via the
Skilltool, and performing read-only file existence checks.\n - Sanitization: No sanitization or validation logic is applied to the metadata retrieved from the MCP server before it is incorporated into the planning process.
Audit Metadata