inspect-architecture-workflow

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Node.js subprocess APIs to run shell commands, notably Git for repository management and a project-specified 'adapter' command for data extraction. The adapter command is executed with shell interpretation enabled.\n- [INDIRECT_PROMPT_INJECTION]: The tool relies on a configuration file (architecture.json) and source code provided by the analyzed project. A malicious project can specify a harmful 'adapter' command or include code patterns designed to manipulate the reviewer agents dispatched by this skill.\n- [DYNAMIC_EXECUTION]: The TypeScript adapter template dynamically loads the TypeScript compiler from the project's own node_modules directory using createRequire, which executes code from the project's local environment.\n- [PERSISTENCE]: The skill automatically appends its cache directory to the .git/info/exclude file to maintain a persistent local state across repository operations without affecting version control.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 02:06 PM