software-architecture
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of documentation (Markdown), configuration (YAML), and a vector asset (SVG). There are no executable files, scripts, or binary payloads included in the package.
- [EXTERNAL_DOWNLOADS]: The skill contains numerous references to external documentation and blogs, including Martin Fowler's website, GitHub repositories for known developer tools, and official engineering blogs from OpenAI and Spring. These are strictly informational links to well-known technology resources and do not involve automated remote code execution or data exfiltration.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project code and instructions to provide architectural advice. While this constitutes an ingestion of external data, the skill does not define any high-privilege tools or scripts that could be exploited by malicious content within those files, resulting in a safe configuration.
- [METADATA_POISONING]: The metadata provided in the skill manifest and the license file is consistent with the stated purpose of the skill and the identity of the author. No deceptive instructions were found in the metadata fields.
Audit Metadata