senior-architect
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using Python to run bundled scripts such as
architecture_diagram_generator.py,dependency_analyzer.py, andproject_architect.py. - [DYNAMIC_EXECUTION]: The toolset relies on the execution of local scripts to perform its primary functions, representing a dynamic execution surface within the agent's environment.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project files, which creates a potential vector for indirect prompt injection if those files contain malicious instructions disguised as code or documentation.
- Ingestion points: Project directories and their contents (e.g., source code,
package.json,requirements.txt). - Boundary markers: None explicitly defined in the skill instructions to delimit untrusted project content from agent instructions.
- Capability inventory: The skill has the capability to read files and execute Python scripts based on the project structure.
- Sanitization: There are no documented sanitization or validation steps for the content processed from analyzed projects.
Audit Metadata