domain-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access commands were detected. The skill is composed entirely of markdown documentation and YAML configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted business documentation and user requirements. It includes a mandatory evidence chain to mitigate risks:
- Ingestion points: User prompts, business contracts, domain documentation, representative tests, and source code (as specified in
references/modeling-guide.md). - Boundary markers: Instructions require the agent to label all statements as
Confirmed,Inferred,Conflict, orNot verifiedto prevent blind acceptance of input data. - Capability inventory: The skill is limited to textual output and conditional file writing to established fact-sources.
- Sanitization: The skill enforces a three-part 'Artifact Gate' in
references/modeling-guide.md, ensuring no files are modified without an existing authoritative location, a confirmed decision, and explicit user authorization.
Audit Metadata