solution-architect
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown templates and natural language instructions. There are no scripts, executables, or code blocks that could be executed on a host system.\n- [PROMPT_INJECTION]: The skill is designed to process untrusted external data (business requirements). This constitutes an indirect prompt injection surface. However, the risk is negligible because the skill's capabilities are restricted to generating markdown text and it does not have access to tools, the network, or the filesystem.\n
- Ingestion points: External business requirements or use case files provided by the user via file references (e.g., @requirements.docx).\n
- Boundary markers: Implicitly defined by the markdown structure and documentation headers, though no explicit 'ignore embedded instructions' markers are present.\n
- Capability inventory: Limited to markdown text generation and formatting within the agent's response context; no tools or shell execution capabilities are defined.\n
- Sanitization: No input validation or sanitization of provided requirement text is performed.
Audit Metadata