senior-architect

Pass

Audited by Gen Agent Trust Hub on May 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions include standard development setup steps that invoke external package managers like 'npm' and 'pip' to download dependencies.
  • [COMMAND_EXECUTION]: The skill provides commands to execute local Python scripts intended for project analysis and the application of automated fixes to the filesystem.
  • [PROMPT_INJECTION]: The skill's core functionality of analyzing external codebases creates an attack surface for indirect prompt injection.
  • Ingestion points: The skill ingests untrusted code data from the user's filesystem via parameters such as <target-path> and <project-path> used in its scripts.
  • Boundary markers: Absent; there are no instructions to use delimiters or ignore potentially malicious commands embedded within the analyzed project files.
  • Capability inventory: The skill utilizes Python scripts capable of reading filesystem content and applying 'automated fixes' (write access).
  • Sanitization: Absent; no evidence of input validation or content escaping for the data extracted from the analyzed projects is provided.
  • [NO_CODE]: The skill references multiple implementation scripts in the scripts/ directory that were not included in the provided file package.
Audit Metadata
Risk Level
SAFE
Analyzed
May 27, 2026, 02:36 PM
Security Audit — agent-trust-hub — senior-architect