proposal
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: Potential for indirect prompt injection. The skill processes external concept briefs and project data which are then used to direct a multi-agent workflow (delegation to 'Vi' and various specialized sub-agents).
- Ingestion points: Data enters the workflow in Step 2 through a user-provided concept-brief file path or direct user input.
- Boundary markers: The instructions lack explicit delimiters or instructions for sub-agents to ignore instructions embedded within the provided project data.
- Capability inventory: The skill possesses file-writing capabilities (via
build_pack) and can influence the behavior of other agents in the workspace environment. - Sanitization: The skill implements coherence and validation checks (
validate_handback,check_coherence) on the final architect outputs, which serves as a security control for the final content, though not for the initial injection stage.
Audit Metadata