ubiquitous-language
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to facilitate the creation and maintenance of domain-driven design (DDD) documentation. Its operations are limited to reading local documentation and writing to a glossary file (UBIQUITOUS_LANGUAGE.md) based on project context.- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface (Category 8) because it ingests untrusted data from codebase files such as READMEs and documentation directories. However, this risk is inherent to its primary function and is mitigated by the skill's limited capabilities.
- Ingestion points: SKILL.md specifies reading from CONTEXT.md, CONTEXT-MAP.md, docs/, specs/, and README files.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external file content as untrusted.
- Capability inventory: The skill is restricted to reading and writing local markdown files; it does not invoke network tools or execute system commands.
- Sanitization: No sanitization or validation logic is defined for the ingested file content.
Audit Metadata