architect-implement
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local bash setup script (
setup-architect.sh) provided by the vendor (tikalk) to initialize the architectural planning environment. This script is used to group ADRs and generate the execution graph. - [DATA_EXFILTRATION]: The skill performs extensive read and write operations on the local filesystem, targeting directories such as
.adlc/anddocs/adlc/. These operations are limited to the project workspace and do not attempt to access sensitive system files (e.g., SSH keys or cloud credentials). - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Architecture Decision Records and user-supplied strings via
$ARGUMENTSto generate content. - Ingestion points: ADR files in
{REPO_ROOT}/.adlc/drafts/adr/and the$ARGUMENTSinput block inSKILL.md. - Boundary markers: The process uses a Directed Acyclic Graph (DAG) orchestration and specific markdown templates for each view to structure the output.
- Capability inventory: The agent has capabilities to read/write files and execute shell scripts within the project root.
- Sanitization: The skill enforces a mandatory Functional View checkpoint and a 10-point final verification checklist to ensure output consistency and safety before completion.
Audit Metadata