domain-modeling
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from files within the project repository, creating a surface where untrusted data could influence agent behavior.
- Ingestion points: The skill reads from
CONTEXT.mdandLINKS.mdlocated in the.agents/projects/<project>/directory. - Boundary markers: No delimiters or explicit warnings to ignore embedded instructions are used when reading these files.
- Capability inventory: The skill has the capability to read from and write to the local file system within the project repository.
- Sanitization: No sanitization, escaping, or validation of the content read from external project files is performed before processing.
Audit Metadata