domain-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill focuses on creating and updating glossaries (CONTEXT.md) and Architecture Decision Records (ADRs). No malicious behaviors, obfuscation, or dangerous system modifications were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes user-provided terminology and code snippets to generate documentation. 1. Ingestion points: Untrusted data enters the context through user conversations about domain terminology and by reading source code files. 2. Boundary markers: Absent; the instructions do not define delimiters for external data. 3. Capability inventory: Limited to writing markdown documentation to the filesystem. 4. Sanitization: Absent; terminology and code content are interpolated directly into markdown templates. This finding is assessed as safe because the capability is restricted to documentation without execution context.
Audit Metadata