architecture
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands for project research and context resolution. It calls a local script
node scripts/resolve-feature.jsinSKILL.mdto identify the target feature. Additionally, the Codex research prompt inreferences/codex-prompt.mdinstructs the agent to use tools such asgit status,git diff,ls,grep, andcatfor repository exploration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests content from technical specifications and source code to generate architecture designs, representing a surface for indirect prompt injection. Ingestion points: Technical specifications (e.g.,
2-tech-spec.md) and codebase files identified during research. Boundary markers: The instructions do not define explicit text delimiters for external content, though they include general safety directives to redact secrets. Capability inventory: The skill possesses broad capabilities includingBashaccess, file writing, and the ability to invoke other sub-agents and skills. Sanitization: There is no evidence of content validation or escaping for the ingested files before processing by sub-agents.
Audit Metadata