reviewing-design-docs
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust 'Independent Review' protocol in
shared/independent-review.mdandSKILL.md, ensuring that the reviewing subagent operates with fresh context and restricted tool access (read and search only). - [SAFE]: The
SKILL.mdfile explicitly prohibits the reviewer from modifying documents, using writing tools, or inheriting the author's session context, which prevents accidental or malicious tampering with the system or source files. - [SAFE]: Input handling in
SKILL.mdincludes instructions for saving external URLs/text to a scratch file outside the repository, minimizing the risk of project-level data exposure or unauthorized file writes within the repo. - [SAFE]: The design template in
references/design-template.mdmandates the inclusion of authorization, resource limits, and error path considerations in the reviewed documents, promoting security-by-design. - [SAFE]: The review brief in
references/design-reviewer.mdspecifically instructs the agent to flag unsupported guarantees regarding safety, security, and data loss as blocking defects.
Audit Metadata