site-architecture

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest data from a local file if present. Ingestion points: .agents/product-marketing-context.md (as referenced in SKILL.md). Boundary markers: Absent. Capability inventory: No file-writing, network operations, or shell command execution detected across the skill instructions. Sanitization: Absent. The potential risk is mitigated by the skill's lack of actionable tools or system-level capabilities.
  • [SAFE]: The skill is a documentation-only asset focused on information architecture guidelines. It contains no executable scripts, external package dependencies, or network-bound functionality. It generates passive text outputs like ASCII trees and Mermaid diagrams.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 12:57 PM