c4-architecture-c4-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a high exposure to indirect prompt injection through its core workflow.
- Ingestion points: The workflow identifies and analyzes every subdirectory and file in a target repository (Phase 1.1, 1.2).
- Boundary markers: The instructions lack boundary markers or warnings for the agent to disregard instructions found within the code being analyzed.
- Capability inventory: The skill invokes subagents via the Task tool and performs widespread file system read and write operations (C4-Documentation/ directory).
- Sanitization: There is no evidence of content sanitization or validation of the ingested code data before it is processed by the LLM.
Audit Metadata