ddd-validate
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands including
find,grep, andsedto traverse thesrc/directory and detect architectural violations in TypeScript files. - [EXTERNAL_DOWNLOADS]: Fetches and runs the
@claude-flow/clipackage from the NPM registry to store task results, which is a well-known service. - [PROMPT_INJECTION]: Identifies a surface for indirect prompt injection from the source code files being analyzed.
- Ingestion points: Processes all
.tsfiles within thesrc/directory to identify entities and aggregates. - Boundary markers: Does not implement delimiters or instructions to distinguish code content from system commands.
- Capability inventory: Includes file system exploration, content analysis, and the execution of external CLI tools via Bash.
- Sanitization: Lacks sanitization or escaping of analyzed content before it is interpolated into shell command arguments for storage.
Audit Metadata