domain-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests project source code and existing documentation to build and sharpen a domain model, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Reads
CONTEXT.md,CONTEXT-MAP.md,adr/files, and project source code as instructed inSKILL.md. - Boundary markers: No specific delimiters or "ignore instructions" warnings are utilized when reading external project content.
- Capability inventory: The skill is authorized to perform file read and write operations across the project repository as described in
SKILL.md. - Sanitization: The skill lacks explicit sanitization or validation logic for the content it reads from the codebase.
Audit Metadata