lead-architect
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process untrusted external data, which is an inherent surface for indirect prompt injection attacks.
- Ingestion points: The
search_webtool is mandated for researching current technical trends and comparisons inSKILL.md(Rule 1). - Boundary markers: The instructions do not specify any delimiters or boundary markers to help the agent distinguish between its instructions and content retrieved from the web.
- Capability inventory: The skill has the capability to perform network operations via
search_weband write architectural documents to the local filesystem usingwrite_to_file. - Sanitization: There are no instructions or patterns provided to sanitize or validate the content retrieved from external sources before it is incorporated into architectural artifacts.
- [NO_CODE]: The skill does not include any executable scripts, binaries, or active code files. It consists entirely of Markdown-based instructions, templates, and reference guides.
Audit Metadata