platform-architect
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local binary utility to perform repository inventory tasks.
- Evidence:
SKILL.mdandscripts/platform_inventory.pyinstruct the agent to execute/home/bjorn/.codex/skill-support/bin/repo-inventorywith various flags. - The utility is located in the author's home directory (
/home/bjorn/), which corresponds to the skill author 'BjornMelin'. - [PROMPT_INJECTION]: The skill instructions create a surface for indirect prompt injection by prioritizing instructions found within the analyzed repository.
- Ingestion points: The agent is instructed to read
AGENTS.mdfrom the target repository first for 'local constraints and canonical commands'. - Boundary markers: No explicit boundary markers or instructions to ignore embedded malicious prompts are provided when reading
AGENTS.md. - Capability inventory: The skill has the capability to execute subprocesses (via
platform_inventory.py) and access external documentation (viacontext7andexaMCP tools). - Sanitization: No sanitization or validation of the content within
AGENTS.mdis performed before the agent adopts its instructions as constraints.
Audit Metadata