c4-codebase-architecture

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and analyzing untrusted content from external repositories, including source code, README files, and infrastructure definitions.
  • Ingestion points: The workflow (Phases 1-5) involves reading repository names, workspace structures, package manifests, and source code files.
  • Boundary markers: The skill does not define specific delimiters or instructions to ignore potential instructions embedded within the analyzed codebase.
  • Capability inventory: The skill is primarily focused on producing textual documentation and diagram source code (Mermaid, PlantUML); it does not request or demonstrate capabilities for file modification, network exfiltration, or command execution based on the ingested data.
  • Sanitization: No explicit sanitization of the content extracted from the repository is mandated before it is processed for architectural inference.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:20 PM
Security Audit — agent-trust-hub — c4-codebase-architecture