architectural-analysis

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local bash scripts (render.sh, compile-html.sh, compile-pdf.sh, and verify-citations.sh) to perform its primary functions. These scripts invoke standard developer tools including Pandoc, the Mermaid CLI (mmdc), and Python 3 to process and format analysis results.
  • [EXTERNAL_DOWNLOADS]: Documentation within scripts/render.sh contains instructions for the user to manually install dependencies like chrome-headless-shell if needed for the Mermaid CLI. The skill itself does not perform automated external downloads during runtime.
  • [COMMAND_EXECUTION]: The verify-citations.sh script executes an embedded Python block via a shell heredoc to extract and validate file path citations from the generated reports.
  • [DATA_EXPOSURE]: The skill is designed to perform deep analysis of the target codebase by reading source files, documentation, and configuration. While this involves extensive file system access, it is restricted to the scope defined by the user and used solely for generating the requested architectural reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 10:22 PM
Security Audit — agent-trust-hub — architectural-analysis