architecture-design-review
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation, checklists, and instructions for performing architectural reviews. No code, scripts, or dangerous configurations are present in the provided files.
- [PROMPT_INJECTION]: The instructions follow a structured, task-oriented format for system design analysis and do not contain attempts to subvert agent behavior or bypass safety filters.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or API keys were detected. The references to secret management systems (e.g., AWS Secrets Manager, HashiCorp Vault) are provided as architectural recommendations for the system being reviewed, not as secrets belonging to the skill.
- [DATA_EXFILTRATION]: There are no network operations, curl/wget commands, or other mechanisms for data exfiltration.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code execution or download external packages.
- [OBFUSCATION]: The content is clear-text markdown with no signs of encoding, hidden characters, or obfuscated payloads.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided documentation, it lacks capabilities such as shell execution or network access that could be leveraged for an attack.
- [DYNAMIC_CONTEXT_INJECTION]: No shell-executing dynamic context syntax was found in the SKILL.md file.
Audit Metadata