ns-agent-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains a 'Reverse mode' designed to document existing systems by reading project artifacts. This process involves ingesting untrusted data from the local environment which could potentially contain malicious instructions.\n
- Ingestion points: The agent reads graph nodes, tool definitions, interrupt points, and existing documentation files (
SKILL.md,docs/context/system-reverse-spec.md,graph-spec.md) as described in the Reverse Mode section ofSKILL.md.\n - Boundary markers: The skill incorporates human-in-the-loop checkpoints, requiring the agent to present 'inferred' mappings for user confirmation or correction before finalization.\n
- Capability inventory: The skill is authorized to write architectural decision records and defense packs to the
docs/specs/directory using file system tools.\n - Sanitization: Analysis is performed through discrete interview steps and a structured reporting template, providing a constrained output format for external data processing.\n- [COMMAND_EXECUTION]: The skill executes a localized Python utility,
scripts/scaffold-report.py, to generate the initial structure for architecture decision records (ADR).\n - Evidence:
SKILL.mdinstructions specify running the script to extract ADR skeletons from templates.\n - Context: The script is a utility for extracting markdown skeletons from a local template file and writing them to the project's documentation directory.\n- [DYNAMIC_EXECUTION]: The skill utilizes a local script for runtime file generation based on project templates.\n
- Evidence: The
scripts/scaffold-report.pyscript is used to dynamically assemble the structure of theagent-architecture.mdfile at runtime.
Audit Metadata