c4-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and analyzing untrusted content from external repositories, including source code, README files, and infrastructure definitions.
- Ingestion points: The workflow (Phases 1-5) involves reading repository names, workspace structures, package manifests, and source code files.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential instructions embedded within the analyzed codebase.
- Capability inventory: The skill is primarily focused on producing textual documentation and diagram source code (Mermaid, PlantUML); it does not request or demonstrate capabilities for file modification, network exfiltration, or command execution based on the ingested data.
- Sanitization: No explicit sanitization of the content extracted from the repository is mandated before it is processed for architectural inference.
Audit Metadata