improve-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for codebase analysis and refactoring assistance. It operates by reading local documentation files like CONTEXT.md and Architecture Decision Records (ADRs) to inform its suggestions.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it processes untrusted codebase content. This ingestion is a functional requirement for its purpose of architectural analysis.
- Ingestion points: The skill reads documentation files (CONTEXT.md, docs/adr/) and uses an Explore sub-agent to walk the codebase files.
- Boundary markers: Absent; there are no specific instructions to the agent to treat content within these files as untrusted or to ignore embedded instructions.
- Capability inventory: The skill can read local files, update documentation (CONTEXT.md, ADRs), and spawn additional sub-agents using the platform's Agent tool.
- Sanitization: None; the skill does not describe any validation or sanitization of the content extracted from the codebase.
Audit Metadata