create-use-case
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection surface identified in the code generation templates.
- Ingestion points: User-provided inputs are interpolated into variables like
{Name},{BoundedContext},{repository}, and{useCaseLogic}withinSKILL.mdandreferences/templates.md. - Boundary markers: The templates do not use delimiters or provide instructions to the agent to disregard instructions within the processed data.
- Capability inventory: The skill documentation defines file system paths for component placement (e.g.,
src/Application/{BoundedContext}/UseCase/), indicating an intent for the agent to perform file-write operations. - Sanitization: There is no mention of sanitization or validation logic for the external content before it is interpolated into the generated PHP files.
Audit Metadata