clean-architecture
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run the
lscommand on various local and system directories (such as~/.claude/skills/,~/.agent/skills/, and.agent/skills/) to identify which companion skills are currently installed. This is part of a companion check workflow triggered on first activation. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to recommend installing additional components via the
npx skills addcommand from the AbsolutelySkilled repository. - [PROMPT_INJECTION]: The skill is designed to analyze project structures and code provided by the user, creating a surface for potential indirect prompt injection.
- Ingestion points: Processes user-supplied code and directory structure information through its architectural review and refactoring features in SKILL.md.
- Boundary markers: Absent; there are no specific instructions to isolate user input from the agent's internal instructions.
- Capability inventory: The skill utilizes file system listing capabilities (
ls) as part of its automated dependency checking routine. - Sanitization: Absent; no mention of sanitizing or validating the user-provided data before processing.
Audit Metadata