codebase-design

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists entirely of architectural documentation and instructions for agent behavior. It does not include any executable scripts, binaries, or network operations.
  • [NO_CODE]: No executable code or scripts were found in the skill package. All files are Markdown or YAML configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines a process for analyzing codebases to provide design recommendations. While this involves reading user-provided code, the skill itself does not possess capabilities that would enable a high-impact attack such as file-writing or command execution. 1. Ingestion points: User codebase files referenced in design briefs (DESIGN-IT-TWICE.md). 2. Boundary markers: None explicitly defined in the instructions. 3. Capability inventory: Limited to generating design recommendations and spawning sub-agents for discussion. 4. Sanitization: No specific sanitization or escaping logic is identified for user-provided codebase content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:35 AM