senior-architect
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, hidden commands, or unauthorized network operations were detected in the skill instructions or associated scripts.
- [COMMAND_EXECUTION]: The skill utilizes several JavaScript scripts (
architecture-diagram-generator.js,dependency-analyzer.js,project-architect.js) for system analysis. These scripts currently consist of safety-neutral boilerplate code that performs basic filesystem checks and logging. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided architectural requirements as untrusted data to generate designs and diagrams.
- Ingestion points: Functional and non-functional requirements used during the 'Requirement Analysis' and 'Context Mapping' phases in
SKILL.md. - Boundary markers: The skill does not implement explicit delimiters or instructions to ignore embedded commands within user requirements.
- Capability inventory: The skill environment has access to shell commands (
npm,python,docker,kubectl) and local script execution. - Sanitization: There is no evidence of input validation or content filtering for the requirements processed by the architecture tools.
Audit Metadata