ubiquitous-language
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates as intended for its primary purpose of creating a ubiquitous language glossary. It analyzes conversation nouns and verbs and formats them into a Markdown file.
- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection because it ingests untrusted data from the conversation to generate file content.
- Ingestion points: Current conversation history (referenced in SKILL.md).
- Boundary markers: Absent; the instructions do not specify delimiters to separate user input from the skill's logic.
- Capability inventory: The skill writes to a local file named
UBIQUITOUS_LANGUAGE.md. - Sanitization: Absent; there is no explicit validation or filtering of domain terms extracted from the conversation.
Audit Metadata