pstack-how
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill traces and reads codebase content to synthesize architectural explanations, which presents a surface for instructions embedded in the code to influence the agent's output.
- Ingestion points: Codebase files accessed via
Read,Grep, andGlobtools as defined inreferences/explainer-prompt.md. - Boundary markers: Absent; the prompts do not instruct the agent to ignore or delimit instructions found within the code being analyzed.
- Capability inventory: Read-only access to the filesystem (
Read,Grep,Glob) and synthesis of information for the user; the skill delegates more complex tasks like model reconciliation to the/domain-modelingtool. - Sanitization: Absent; the agent is instructed to use code snippets and prose directly from its findings without specific sanitization of the content.
Audit Metadata