domain-model
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for documentation and domain analysis. It reads codebase content and writes Markdown files within the repository's workspace. No network operations, credential harvesting, or unauthorized privilege escalation patterns were found.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it explores and processes codebase content. However, the risk is negligible as its capabilities are limited to generating documentation (CONTEXT.md and ADRs) and it does not execute code or exfiltrate data.
- Ingestion points: The skill reads external codebase files and user-provided plans (SKILL.md).
- Boundary markers: No explicit delimiters or boundary markers are used when processing codebase content.
- Capability inventory: File system read operations for codebase exploration and file system write operations for documentation updates (CONTEXT.md, ADRs).
- Sanitization: The skill follows structured templates (CONTEXT-FORMAT.md, ADR-FORMAT.md) for its outputs, providing some structural validation.
Audit Metadata