sequence-diagram
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python validation script
geometry-audit.pylocated at../architecture-diagram/resources/. This is an internal tool provided by the vendor to verify diagram constraints such as component overlap and label collisions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input (natural language descriptions of flows) to generate diagram blueprints. While it lacks explicit boundary markers for this input, the output is restricted to SVG/HTML markup and is validated by a deterministic geometry audit script, reducing the risk of malicious payload execution.
Audit Metadata