ubiquitous-language
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from the conversation history to generate its output.
- Ingestion points: The skill scans the current conversation for domain-relevant nouns, verbs, and concepts to build the glossary (SKILL.md).
- Boundary markers: The instructions do not define clear delimiters or include warnings for the agent to ignore potentially malicious instructions embedded within the conversation text.
- Capability inventory: The skill possesses the capability to write and rewrite files on the local system, specifically
UBIQUITOUS_LANGUAGE.md. - Sanitization: There is no mention of sanitizing, escaping, or validating the terminology extracted from the conversation before it is written to the filesystem.
Audit Metadata