domain-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data from the user's codebase (entities, services, and logic).
- Ingestion points: The skill scans the entire codebase to extract business concepts during Phase 1 of the analysis process described in SKILL.md.
- Boundary markers: There are no explicit delimiters or "ignore embedded instructions" warnings in the prompt instructions to prevent the agent from being influenced by malicious text hidden in code comments or documentation within the analyzed files.
- Capability inventory: The skill is primarily analytical and does not request tool permissions (e.g., shell access, network operations) to execute actions based on the analyzed code.
- Sanitization: There is no explicit mechanism defined to sanitize or validate extracted strings from the codebase before they are processed and presented in the analysis reports.
Audit Metadata