with-ubiquitous-language
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the codebase and markdown files, which are then used to influence agent behavior through term definitions and conflict detection.
- Ingestion points:
scripts/migrate.pyparsesUBIQUITOUS_LANGUAGE.mdfiles;scripts/query.pyreads the YAML dictionary;SKILL.mdinstructs the agent to scan project structure and content. - Boundary markers: Absent. Extracted terms and definitions are interpolated into the session context without protective delimiters or instructions to ignore embedded commands.
- Capability inventory:
scripts/write.pyandscripts/migrate.pyperform file system writes;SKILL.mdmodifies project configuration files (AGENTS.md/CLAUDE.md). - Sanitization: None detected in the provided scripts.
- [PERSISTENCE]: The skill includes instructions to modify
AGENTS.mdorCLAUDE.mdto ensure it is automatically invoked in future sessions. While it requests user permission, this establishes a persistent instruction set that overrides default agent behavior for the project workspace.
Audit Metadata