domain-modeling
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads project source code to cross-reference domain concepts with implementation, creating a surface where malicious instructions embedded in the code could influence agent behavior.
- Ingestion points: Reads files within the
src/directory and documentation files likeCONTEXT.mdandCONTEXT-MAP.md(specified inSKILL.md). - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the source code being analyzed.
- Capability inventory: The skill has the capability to write and update markdown files on the local file system (e.g.,
CONTEXT.md,docs/adr/*.md). - Sanitization: No sanitization or validation of the ingested code content is performed before processing.
Audit Metadata