domain-modeling
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (source code and existing documentation) to update the domain model and generate Architectural Decision Records (ADRs). These ADRs are explicitly intended to include code skeletons and implementation guidance for downstream AI agents, creating a potential multi-step injection chain.
- Ingestion points: Reads
CONTEXT.md,CONTEXT-MAP.md, and project files within thesrc/directory. - Boundary markers: The instructions do not define delimiters or provide warnings for the agent to ignore instructions embedded within the ingested data.
- Capability inventory: The skill performs file-writing operations to create and update repository documentation.
- Sanitization: There is no evidence of validation or escaping performed on the ingested code or text before it is interpolated into generated ADRs or the glossary.
Audit Metadata