improve-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git logto analyze commit history and uses system-specific commands (xdg-open,open,start) to display generated HTML reports to the user. - [EXTERNAL_DOWNLOADS]: The generated architectural reports reference external libraries (Tailwind CSS and Mermaid JS) from well-known services (
cdn.tailwindcss.comandcdn.jsdelivr.net) to provide styling and diagrams. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes untrusted codebase files, architectural decision records, and project context files.
- Ingestion points: Codebase files,
CONTEXT.md, and files withindocs/adr/(SKILL.md). - Boundary markers: None explicitly implemented to separate codebase content from analysis instructions.
- Capability inventory: The skill can execute shell commands (
git,open) and perform file system modifications (CONTEXT.md, temporary HTML files). - Sanitization: There is no evidence of sanitization or escaping of ingested codebase content before it is processed or rendered in the HTML report.
Audit Metadata