system-design
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/validate_design.py) to validate the generated SYSTEM-DESIGN.md artifact. This script is part of the skill package and performs static regex-based checks for structure, completeness, and safety.- [CREDENTIALS_UNSAFE]: The skill incorporates specific safety rules and automated checks to prevent the exposure of secrets. The SKILL.md instructions explicitly forbid placing credentials or tokens in artifacts, and the validation script includes a secret-detection regex to identify and flag potential leaks.- [DATA_EXPOSURE]: The skill is designed to perform reconnaissance on the local workspace (Gate 1) to reuse existing architecture facts. This access is scoped to identifying project structure and configuration to provide relevant design advice.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted workspace data and user requirements. It mitigates associated risks by requiring structured artifact markers, stable ID tracing, and running a validator that detects placeholders (TODO/FIXME) and suspicious patterns in the final output.
Audit Metadata