skills/ruvnet/ruflo/ddd-validate/Gen Agent Trust Hub

ddd-validate

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell commands including find, grep, and sed to traverse the src/ directory and detect architectural violations in TypeScript files.
  • [EXTERNAL_DOWNLOADS]: Fetches and runs the @claude-flow/cli package from the NPM registry to store task results, which is a well-known service.
  • [PROMPT_INJECTION]: Identifies a surface for indirect prompt injection from the source code files being analyzed.
  • Ingestion points: Processes all .ts files within the src/ directory to identify entities and aggregates.
  • Boundary markers: Does not implement delimiters or instructions to distinguish code content from system commands.
  • Capability inventory: Includes file system exploration, content analysis, and the execution of external CLI tools via Bash.
  • Sanitization: Lacks sanitization or escaping of analyzed content before it is interpolated into shell command arguments for storage.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:57 AM
Security Audit — agent-trust-hub — ddd-validate