domain-modeling
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository's source code and user input to update the domain model documentation.
- Ingestion points: The agent reads repository source code and user conversation to identify domain terms.
- Boundary markers: The instructions do not specify any markers or safety prompts to prevent the agent from following instructions embedded in the analyzed code.
- Capability inventory: The skill uses file-read and file-write capabilities to maintain CONTEXT.md and CONTEXT-MAP.md files.
- Sanitization: There is no instruction to sanitize or validate the content extracted from source code before writing it to documentation.
Audit Metadata