improve-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes system commands to analyze project history and display architectural reports.
- Evidence: Uses
git log --onelineto identify codebase hot spots and utilizesxdg-open,open, orstartto open generated HTML files in the browser (SKILL.md). - [EXTERNAL_DOWNLOADS]: Incorporates third-party resources from well-known content delivery networks into the generated reports.
- Evidence: Loads Tailwind CSS from
cdn.tailwindcss.comand the Mermaid.js diagramming library fromcdn.jsdelivr.net(HTML-REPORT.md). - [PROMPT_INJECTION]: The skill processes untrusted content from the codebase and git history, creating a vulnerability to indirect prompt injection.
- Ingestion points: Reads codebase files,
CONTEXT.md, Architecture Decision Records (ADRs), and git commit logs (SKILL.md). - Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within ingested data.
- Capability inventory: The agent can write to the local file system, execute shell commands, and invoke other specialized skills like
/grillingor/domain-modeling(SKILL.md). - Sanitization: No sanitization or validation of the content read from the repository is implemented.
Audit Metadata