domain-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill does not contain any executable scripts, binary files, or automated commands. It consists entirely of Markdown instructions for the AI agent.\n- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent processes user-provided domain terminology and project source code to generate or update documentation files (
CONTEXT.mdand ADRs).\n - Ingestion points: User conversation and project source code (referenced in
SKILL.mdunder "Cross-reference with code").\n - Boundary markers: None specified for the output documentation files.\n
- Capability inventory: The skill instructs the agent to perform file-write operations on project documentation.\n
- Sanitization: No explicit sanitization or validation steps are defined for the content being written, which is expected for a documentation-focused skill.
Audit Metadata