architecture-guardian
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the AI agent to execute multiple shell commands using the
agent-kernelCLI tool, includingarchitecture doctor,architecture discover,architecture reuse, andarchitecture check. These commands are used to analyze the codebase and enforce architectural rules. - [EXTERNAL_DOWNLOADS]: A provided GitHub Actions template (
templates/github-actions.yml) includes a command to install the@mamdouh-aboammar/agent-kernelpackage from the NPM registry. This package appears to be the core toolset associated with the skill author. - [PROMPT_INJECTION]: The skill uses
agent-kernel architecture discover .to ingest data from the local repository. This represents a surface for indirect prompt injection where instructions embedded in the codebase could attempt to influence the agent's analysis, although the tool is documented to perform static analysis without executing the source files. - Ingestion points: Files scanned by
agent-kernel architecture discover .across the repository. - Boundary markers: The instructions do not explicitly provide boundary delimiters for the agent when reviewing tool output from the scanned code.
- Capability inventory: The agent can execute the
agent-kerneltool suite and perform file reads/writes within the defined contract scope. - Sanitization: The tool documentation (
references/threat-model.md) outlines mitigations such as normalized paths and regex-based extraction to prevent code execution during analysis.
Audit Metadata