domain
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content by reading the project codebase and documentation to verify domain concepts and contradictions.
- Ingestion points: The skill reads docs/CONTEXT_MAP.md, docs/UBIQUITOUS_LANGUAGE.md, docs/contexts/*/CONTEXT.md, and general project source code in the SKILL.md file.
- Boundary markers: The instructions do not specify explicit delimiters or instructions to ignore embedded prompts for the content read from the codebase.
- Capability inventory: The skill possesses the capability to write and update markdown files in the docs/ directory and its subdirectories as described in SKILL.md.
- Sanitization: No explicit sanitization or validation of the ingested code content is defined before it is processed by the agent.
Audit Metadata