attio-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses
Read,Glob, andGrepto ingest data from the repository for mapping system components and trust boundaries. This ingestion of local repository data is a standard function for architecture design and review. - Ingestion points: Files within the repository path provided as an argument.
- Boundary markers: The skill explicitly instructs the agent to define trust boundaries and approval limits.
- Capability inventory: The skill uses
WebFetchfor documentation andWrite/Editto output architectural designs. - Sanitization: The skill focus is on generating design documentation rather than executable code.
- [EXTERNAL_DOWNLOADS]: The skill references official Attio documentation and the official
attioSDK. These are well-known resources from a trusted service provider. - [CREDENTIALS_SAFE]: The instructions mandate the use of a tenant credential resolver and server-side interfaces rather than hardcoding credentials or accepting unauthorized identifiers.
Audit Metadata