site-architecture
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structural guidance for website planning and does not contain any executable code, network requests, or obfuscated content.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill is instructed to read local context files like
.agents/product-marketing.mdor.claude/product-marketing.md. This is a standard feature for AI agents to understand business context and does not involve the exfiltration of sensitive system credentials or unauthorized user data.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied information and project context files. While it represents a surface for indirect prompt injection, it is assessed as safe because the skill lacks dangerous tools or capabilities. • Ingestion points:.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.mdas specified inSKILL.md. • Boundary markers: Absent. • Capability inventory: No file system writing, network operations, or shell command execution capabilities identified across any script or configuration file. • Sanitization: Absent.
Audit Metadata