data-flow-architect
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily a documentation utility that provides structured templates and methodologies for system architecture. It does not perform network operations, access sensitive user credentials, or execute untrusted remote code.
- [COMMAND_EXECUTION]: The skill includes two utility bash scripts (
generate-data-flow.shandvalidate-data-flow.sh). These scripts use standard Unix tools likesed,grep, andawkto perform local string replacements in templates and validate documentation structure. Both scripts implement input validation, such as checking for path traversal (../) and restricting system names to alphanumeric characters to prevent command or delimiter injection. - [DATA_EXPOSURE]: The
SKILL.mdfile contains a dedicated 'Security Warning' section instructing users never to document sensitive information such as API keys, credentials, internal IP addresses, or secrets in their architecture diagrams. This demonstrates a proactive approach to preventing accidental data exposure.
Audit Metadata