blueprint-derive-adr
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses common shell utilities including
ls,mkdir,grep, andwcvia the Bash tool to analyze project structure and manage documentation files in thedocs/adrs/directory. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its analysis of untrusted codebase data. Ingestion points: The skill reads project structure, configuration files such as
package.jsonandtsconfig, and existing ADR markdown files. Boundary markers: No specific markers or instructions exist to isolate project content from agent instructions, which could allow malicious comments in source code to influence the agent's behavior. Capability inventory: The agent has access to theBashtool for local command execution and theWritetool for file system modification. Sanitization: Content extracted from analyzed files is used directly in reasoning and document generation without explicit validation or escaping.
Audit Metadata