architect-refine-critique
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external PRDs and codebase content which may contain instructions that could subvert the architecture review process or influence the agent to perform unauthorized file modifications.
- Ingestion points: The skill reads PRD files provided via arguments and scans the local codebase using Glob/Grep.
- Boundary markers: There are no instructions to the agent to treat external data with specific delimiters or to ignore potential instructions embedded within the data.
- Capability inventory: The skill can write to the filesystem, execute commands via npx, and delegate tasks to subagents.
- Sanitization: No sanitization or validation of the input data is performed before processing.
- [COMMAND_EXECUTION]: The skill uses
npx nx show projectsto generate a project map and analyze dependencies, which is a standard procedure for Nx-based monorepos. - [EXTERNAL_DOWNLOADS]: The use of
npxmay trigger the retrieval of thenxpackage from the npm registry, representing a download from a well-known service.
Audit Metadata