implementing-domain-driven-design
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of user-provided code and design requirements, which creates a surface for indirect prompt injection where malicious instructions could be embedded in the code being analyzed or generated.
- Ingestion points: Source code and architectural requirements provided by the user for review, editing, or generation (SKILL.md, implementing-domain-driven-design.md).
- Boundary markers: There are no explicit markers or instructions defined to isolate user-provided data from the agent's internal instruction set.
- Capability inventory: The skill assumes an agent with code-handling capabilities, such as file modification and shell access.
- Sanitization: No methods for sanitizing or escaping user-provided code are mentioned in the skill files.
- [NO_CODE]: The skill contains no executable scripts, binaries, or configuration files that execute code; it consists solely of instruction-based Markdown files.
Audit Metadata