ddd-glossary-gen
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted conversation data to generate structured output.
- Ingestion points: The skill scans current conversation content to identify domain terms in SKILL.md.
- Boundary markers: There are no markers or instructions to delimit untrusted conversation data or ignore instructions embedded within it.
- Capability inventory: The skill reads from and writes to the local file UBIQUITOUS_LANGUAGE.md.
- Sanitization: The instructions do not provide for sanitization or validation of the input data before it is written to the file system.
- [COMMAND_EXECUTION]: The skill utilizes local file system access to read and write the UBIQUITOUS_LANGUAGE.md file within the current working directory.
Audit Metadata