cs-arch
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates strictly within the local development environment, focusing on managing internal project documentation in the
.codestable/architecture/directory. - [COMMAND_EXECUTION]: Employs standard local CLI tools, specifically
git logfor change detection and a project-internal utility.codestable/tools/search-yaml.pyfor metadata indexing. These operations are transparently defined and aligned with the skill's primary function. - [PROMPT_INJECTION]: The skill processes untrusted input from the project's source code and documentation. To mitigate the risk of indirect prompt injection, it enforces 'evidence-based' rules requiring all architectural assertions to be anchored to specific file and line numbers (
file:line). Additionally, all persistence operations (writing files) require explicit user review and approval, preventing automated malicious actions.
Audit Metadata