inspect-architecture-workflow
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Node.js subprocess APIs to run shell commands, notably Git for repository management and a project-specified 'adapter' command for data extraction. The adapter command is executed with shell interpretation enabled.\n- [INDIRECT_PROMPT_INJECTION]: The tool relies on a configuration file (
architecture.json) and source code provided by the analyzed project. A malicious project can specify a harmful 'adapter' command or include code patterns designed to manipulate the reviewer agents dispatched by this skill.\n- [DYNAMIC_EXECUTION]: The TypeScript adapter template dynamically loads the TypeScript compiler from the project's ownnode_modulesdirectory usingcreateRequire, which executes code from the project's local environment.\n- [PERSISTENCE]: The skill automatically appends its cache directory to the.git/info/excludefile to maintain a persistent local state across repository operations without affecting version control.
Audit Metadata