data-flow-architect

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily a documentation utility that provides structured templates and methodologies for system architecture. It does not perform network operations, access sensitive user credentials, or execute untrusted remote code.
  • [COMMAND_EXECUTION]: The skill includes two utility bash scripts (generate-data-flow.sh and validate-data-flow.sh). These scripts use standard Unix tools like sed, grep, and awk to perform local string replacements in templates and validate documentation structure. Both scripts implement input validation, such as checking for path traversal (../) and restricting system names to alphanumeric characters to prevent command or delimiter injection.
  • [DATA_EXPOSURE]: The SKILL.md file contains a dedicated 'Security Warning' section instructing users never to document sensitive information such as API keys, credentials, internal IP addresses, or secrets in their architecture diagrams. This demonstrates a proactive approach to preventing accidental data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:45 PM