c4-architecture-c4-architecture

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted code and configuration files from a repository to generate documentation.\n
  • Ingestion points: The skill performs comprehensive codebase searches and reads files across all subdirectories to provide context for documentation synthesis in Phases 1 through 4.\n
  • Boundary markers: Prompts provided to subagents (e.g., 'Analyze the code in directory: [directory_path]') lack explicit delimiters or instructions to treat the analyzed content as data rather than instructions, which could allow malicious comments in the source code to influence agent behavior.\n
  • Capability inventory: The skill has the capability to read repository files, write markdown documentation and OpenAPI specifications to the local file system, and invoke specialized subagents via the Task tool.\n
  • Sanitization: There is no evidence of filtering, escaping, or validation of the content extracted from the repository before it is passed to the AI agents for analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 12:45 PM
Security Audit — agent-trust-hub — c4-architecture-c4-architecture