architecture-audit
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted codebase data to perform its architectural analysis, creating a potential surface for indirect prompt injection.
- Ingestion points: Codebase files are accessed by the
Agenttool during the initial exploration phase (Step 1) and by multiple sub-agents during the parallel design phase (Step 5). - Boundary markers: The instructions do not define specific delimiters or 'ignore embedded instructions' prompts to isolate ingested code content from the agent's logic.
- Capability inventory: The skill leverages the
Agenttool to spawn sub-agents and has the capability to write markdown files to project directories such asprds/or.specs/prds/(SKILL.md). - Sanitization: Content from the audited codebase is interpolated into the design workflow and report generation (Step 7) without explicit sanitization or validation of the generated filenames or output content.
Audit Metadata