castai-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as cluster inventory and repository content to generate architectural diagrams and records.
- Ingestion points: Cluster inventory files and repository contents accessed via
ReadandGrep(SKILL.md, references/official-docs.md). - Capability inventory: Modifies files using
WriteandEdittools. - Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore instructions embedded in the ingested data.
- Sanitization: No explicit sanitization or validation of the ingested inventory data is described.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and hosted component information from CAST AI, a well-known service.
- References official documentation at
docs.cast.aifor architecture guidelines, permissions, and component information.
Audit Metadata