architecture-satisfaction
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon repository content, including architecture documentation, commit history, and existing code, creating a surface for adversarial content to influence the agent.
- Ingestion points: The workflow (Step 1) requires inspection of repository state, recent commits, and 'relevant architecture docs'.
- Boundary markers: Absent. The instructions do not define clear delimiters or provide warnings to ignore potential instructions found within the repository files.
- Capability inventory: The agent has the authority to execute shell commands (tests, builds, startup scripts), write to files, and perform git commits.
- Sanitization: Absent. There is no mention of validating or escaping content read from the repository before it is used to inform the refactoring process.
- [COMMAND_EXECUTION]: The workflow requires the agent to execute arbitrary commands found within the project environment.
- The agent is instructed to 'live-test the system' and 'run the relevant automated checks', which includes project-specific startup commands and test suites.
- Executing these commands involves running scripts or binaries provided by the repository, which poses a risk if the repository content is untrusted.
Audit Metadata