domain-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository, including project source code and existing documentation, which could contain hidden instructions or malicious content designed to influence the agent's output during the domain modeling process. \n
- Ingestion points: Reads project source code,
CONTEXT.md,CONTEXT-MAP.md, and Architecture Decision Records (ADRs) indocs/adr/. \n - Boundary markers: The instructions do not specify the use of delimiters or boundary markers when interpolating content from these files into the agent's context. \n
- Capability inventory: The skill has the capability to write to
CONTEXT.mdand create new ADR markdown files. \n - Sanitization: There is no mention of sanitizing, validating, or filtering the ingested content before processing.
Audit Metadata