check-bounded-contexts
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code and configuration files as part of its analysis workflow. 1. Ingestion points: Reads PHP source files and composer.json using find and grep commands across the project directory. 2. Boundary markers: No explicit delimiters are used to wrap or isolate the ingested file content. 3. Capability inventory: Limited to read-only shell operations including find, grep, and basic file reading. 4. Sanitization: No evidence of input sanitization or validation of the ingested code content before it is presented to the agent.
- [COMMAND_EXECUTION]: The skill uses local shell commands including find, grep, and echo to identify indicators and patterns within the source code, which is the intended behavior for an architectural auditing tool.
Audit Metadata