architecture-optimization
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize various command-line tools for architectural analysis, including
grep,dependency-cruiser,import-linter,jdeps, andgo list. It also recommends executing database-specific commands such asEXPLAIN (ANALYZE, BUFFERS)andSELECT ... FOR UPDATEto audit performance and concurrency, as detailed in thereferences/methods.mdfile. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile directs the agent to suggest installing additional components using the commandnpx skills add wondelai/skills/<slug> --global. This command fetches and executes code from the NPM registry associated with the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill maintains state and manages its multi-phase journey by reading project documentation files, which could serve as an attack surface for instructions embedded in data.
- Ingestion points: The agent reads the
docs/ARCHITECTURE-OPTIMIZATION-PLAN.mdfile and other artifacts in thedocs/directory to resume its journey across sessions. - Boundary markers: Absent; the skill does not employ specific delimiters or integrity checks to verify that the state documentation files remain untampered with between sessions.
- Capability inventory: The skill possesses capabilities to read and write local files and to execute various shell-based analysis tools across its eight phases.
- Sanitization: Absent; the instructions do not include any logic for validating or sanitizing the contents of the documentation files prior to their ingestion into the agent's context.
Audit Metadata