improve-codebase-architecture
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it incorporates external, potentially untrusted documentation into its reasoning process. \n- Ingestion points: The agent reads architectural context from
CONTEXT.md,CONTEXT-MAP.md, and architectural decision records indocs/adr/. \n- Boundary markers: The skill's instructions do not implement delimiters or 'ignore' instructions to isolate the content of these documentation files from the agent's core logic. \n- Capability inventory: The skill utilizes codebase exploration sub-agents, writes updates to the domain model (CONTEXT.md), creates new ADR files, and spawns multiple sub-agents to propose interface designs. \n- Sanitization: There is no evidence of content sanitization or validation for the data ingested from the documentation files before it is processed by the primary agent or sub-agents.
Audit Metadata