domain-modeling
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted data from the project's source code to verify consistency with domain terminology.
- Ingestion points: Processes user-provided terminology and existing source code files during cross-referencing tasks (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands when reading source code or user input.
- Capability inventory: The skill is capable of writing to markdown files including
CONTEXT.md,CONTEXT-MAP.md, and documentation within thedocs/adr/directory. - Sanitization: No explicit sanitization or validation of the ingested code content is performed before it is processed by the agent's logic.
Audit Metadata