improve-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local codebase assets, which represents an attack surface where untrusted data can influence the agent behavior.\n
- Ingestion points: The skill reads source code files, project glossaries, and Architecture Decision Records (ADRs) to perform its analysis (SKILL.md).\n
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are specified for the ingested content.\n
- Capability inventory: The skill possesses the capability to execute shell commands (
git log) and write HTML reports to the local filesystem (SKILL.md, HTML-REPORT.md).\n - Sanitization: The skill does not describe any sanitization or validation of the content read from the codebase before processing.
Audit Metadata