system-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data from
plan.mdto inform its architectural recommendations, creating a surface for indirect prompt injection. - Ingestion points: Processes
plan.mdusing theReadtool to gather context on feature scope. - Boundary markers: Absent; there are no specific delimiters or instructions to ignore embedded commands within the input file.
- Capability inventory: Utilizes
Read,Grep,Glob, andWritetools to perform project analysis and document generation. - Sanitization: The skill does not implement content validation or sanitization for the ingested plan data before it is integrated into the architectural output.
Audit Metadata