drive-to-legacy
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves analyzing unfamiliar legacy codebases, which creates a surface for indirect prompt injection if the analyzed files contain malicious instructions.
- Ingestion points: The skill reads project documentation, configuration files (e.g., package.json, vite.config.ts), and all source code files during exploration phases 1 through 6 in SKILL.md.
- Boundary markers: No boundary markers or instructions to ignore embedded commands are specified for the untrusted content being processed.
- Capability inventory: The skill utilizes file-read and file-write capabilities across all phases to generate the ARCHITECTURE.md documentation.
- Sanitization: No explicit sanitization or validation of the content extracted from the codebase is mentioned before it is processed by the agent.
- [NO_CODE]: The skill consists exclusively of markdown instructions and reference documentation; it does not include executable scripts, shell commands, or binary assets.
Audit Metadata