domain-modeling
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates domain modeling by managing documentation files such as
CONTEXT.mdand Architectural Decision Records (ADRs). It does not perform any high-risk operations such as remote code execution, network requests, or sensitive credential access. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes data from project source code and context files.
- Ingestion points: The skill reads
CONTEXT.md,CONTEXT-MAP.md, project source code insrc/, and agent-specific knowledge fromknowledge-vault.md. - Boundary markers: No explicit boundary markers or delimiters are defined in the instructions to distinguish between domain data and potential embedded instructions.
- Capability inventory: The skill is limited to reading files and writing Markdown content to specific documentation paths (
CONTEXT.md,docs/adr/*.md). - Sanitization: No specific sanitization or filtering of external content is mentioned.
- Note: This surface is inherent to the skill's primary function of synchronizing documentation with code. Given that the skill lacks execution privileges or network access, this surface does not represent a significant security threat.
Audit Metadata