code-architecture-writer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted data from local codebases and git history, creating a surface for indirect instructions to influence the agent.
- Ingestion points: The skill ingests data using
git diff,git log, and aReadtool to examine project files and metadata as described in Phase 1 and Phase 2 of the workflow inSKILL.md. - Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore instructions embedded within the source code or commit messages it processes.
- Capability inventory: The skill possesses the ability to execute shell commands (via
git) and perform file system operations (viaReadandEdittools). - Sanitization: There is no evidence of sanitization or escaping of the ingested code snippets before they are interpolated into the generated markdown documents in Phase 3.
Audit Metadata