architecture-quality-loop
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed with defensive patterns against accidental or malicious autonomous changes. Specifically, it mandates user approval for 'substantial' or 'structural' architectural changes before any fan-out task execution occurs.
- [PROMPT_INJECTION]: While the skill ingests data from generated documentation (
docs/architecture/ASSESSMENT.md), which is a potential surface for indirect prompt injection, the risk is mitigated by the orchestration logic that requires a green baseline (build and tests) and explicit user gates for non-trivial modifications. - Ingestion points: The agent reads
docs/architecture/ASSESSMENT.mdin the 'ANALYZE + ASSESS' and 'LOOP or STOP' steps to determine its work list. - Boundary markers: Not explicitly defined in the instructions for reading the document.
- Capability inventory: The orchestrator dispatches specialized 'seats' (domain implementers, designers, and verifiers) to modify code and execute build/test tools.
- Sanitization: The skill relies on the 'architecture-analyzer' to own and regenerate the assessment docs rather than allowing arbitrary edits during the loop.
Audit Metadata