prose-architect
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to analyze external codebase manifests and structures, creating a surface for indirect prompt injection.
- Ingestion points: The 'Brownfield Mode' described in
references/analysis.mdreads file structures,package.json, andREADME.mdto assess project complexity. - Boundary markers:
SKILL.mddefines explicitCANNOTandAPPROVAL REQUIREDboundaries to restrict agent actions and prohibit writing business logic. - Capability inventory: Across all reference files, the skill's capabilities are limited to generating markdown-based agent primitives and structural recommendations.
- Sanitization: There is no documented mechanism for sanitizing or escaping content ingested from the analyzed files.
- [COMMAND_EXECUTION]: Architecture patterns in
references/patterns.mdprovide templates for agents that utilize theterminalandwritetools. While the skill itself is instructional and focuses on documentation, it promotes the creation of autonomous agents with high-privilege access to the host system.
Audit Metadata