domain-driven-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external source code and design documents to perform architectural reviews. This creates a surface where untrusted data could attempt to influence the agent's behavior.
- Ingestion points: The agent is instructed to read and review external project code, service layouts, and module definitions (SKILL.md).
- Capability inventory: While the skill itself does not invoke tools, the environment in which it operates typically grants the agent access to file systems and terminal commands to perform the review.
- Boundary markers: The instructions lack explicit delimiters or instructions to ignore potential commands embedded within the code being analyzed.
- Sanitization: No sanitization or validation mechanisms are defined for the input source code before it is processed by the agent.
Audit Metadata