pragmatic-guard
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the local
cpcommand to initialize project-specific configuration and deferral files from internal templates. These operations are limited to local filesystem management. - [INDIRECT_PROMPT_INJECTION]: The skill is configured by reading external project files.
- Ingestion points: The agent reads
.architecture/config.ymlto determine its assessment logic and intensity levels. - Boundary markers: None are defined to differentiate configuration data from potential instructions.
- Capability inventory: Tool access is restricted to
ReadandEditoperations as specified in the frontmatter. - Sanitization: The skill does not perform validation or sanitization on the configuration file content.
Audit Metadata