software-architect
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external codebases to generate architecture reviews, which exposes a surface for indirect prompt injection where malicious code could attempt to manipulate the agent's findings.
- Ingestion points: Source code content analyzed through semantic search and code analysis tools.
- Boundary markers: The instructions do not define specific delimiters or instructions to treat codebase content as data rather than instructions.
- Capability inventory: The skill produces architectural diagrams, technical debt reports, and modernization roadmaps based on the analyzed code.
- Sanitization: No specific sanitization or filtering of codebase content is mentioned to prevent embedded instructions from affecting the agent's behavior.
Audit Metadata