improve-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not perform any unauthorized network operations, exfiltrate data, or attempt to persist across sessions. It functions as a codebase architecture reviewer and documentation maintainer.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it analyzes external codebase content to provide suggestions.
- Ingestion points: The entire codebase is read using the Explore sub-agent to find refactoring candidates.
- Boundary markers: No specific delimiters or instructions are used to distinguish codebase content from the agent's core instructions.
- Capability inventory: The skill can modify domain documentation (CONTEXT.md), create Architecture Decision Records (ADRs), and spawn sub-agents for analysis.
- Sanitization: Input from the codebase is processed for architectural patterns without specific sanitization for embedded instructions.
- [COMMAND_EXECUTION]: The skill utilizes the Agent tool to spawn sub-agents for parallel design exploration and codebase mapping, which is a legitimate and standard use of the tool for this application.
Audit Metadata