skills/pluginagentmarketplace/custom-plugin-software-design/domain-driven-design/Gen Agent Trust Hub
domain-driven-design
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill accepts untrusted data through the
domain_descriptionparameter (max 10,000 characters). - Ingestion points:
domain_descriptionfield in theSkillParamsinterface (SKILL.md). - Boundary markers: None. The instructions do not define delimiters for the input text.
- Capability inventory: The skill produces domain models and emits events (
domain_modeled) consumed by other agents like05-domain-drivenand07-architecture-patterns. - Sanitization: No input sanitization or filtering logic is present in the scripts.
- Unsafe Deserialization (SAFE): The validation script
scripts/validate.pycorrectly usesyaml.safe_load(), mitigating potential code execution via YAML tags.
Audit Metadata