bfsg-produktkonformitaet
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the agent with specific shell commands to run a local utility script (
scripts.legal_calc.cli) for calculating legal deadlines and retention periods. This is a functional requirement for the skill's purpose as a legal aid tool.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data, including technical documentation, authority correspondence, and product details. Since these inputs are not sanitized or wrapped in boundary markers within the prompt instructions, they represent a surface for indirect prompt injection where malicious content could attempt to influence the agent's output.
Audit Metadata