adr
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Node.js scripts to manage the ADR lifecycle. It utilizes
scripts/resolve-feature.jsto determine the target directory andskills/adr/scripts/next-adr-number.jsto compute the next available sequence number. These operations are performed using the restrictedBash(node:*)tool. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a documentation generator that ingests user-provided text to populate architectural records.
- Ingestion points: ADR metadata (Title) and descriptive sections (Context, Decision, Consequences, Alternatives) gathered during Phase 3.
- Boundary markers: The skill does not employ specific delimiters or "ignore instructions" warnings for the interpolated markdown content.
- Capability inventory: The skill uses
WriteandEdittools to store the records in thedocs/features/directory. - Sanitization: The skill includes a resolution gate that validates the feature slug using a case-insensitive regex pattern (
/^[a-z0-9][a-z0-9._-]*$/i) to prevent path traversal attempts such as../evil.
Audit Metadata