c4-architecture-c4-architecture
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted code and configuration files from a repository to generate documentation.\n
- Ingestion points: The skill performs comprehensive codebase searches and reads files across all subdirectories to provide context for documentation synthesis in Phases 1 through 4.\n
- Boundary markers: Prompts provided to subagents (e.g., 'Analyze the code in directory: [directory_path]') lack explicit delimiters or instructions to treat the analyzed content as data rather than instructions, which could allow malicious comments in the source code to influence agent behavior.\n
- Capability inventory: The skill has the capability to read repository files, write markdown documentation and OpenAPI specifications to the local file system, and invoke specialized subagents via the Task tool.\n
- Sanitization: There is no evidence of filtering, escaping, or validation of the content extracted from the repository before it is passed to the AI agents for analysis.
Audit Metadata