fristlose-kuendigung-543
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize a local Python-based command-line tool (scripts.legal_calc.cli) for performing arithmetic calculations related to payment arrears and legal deadlines.
- [EXTERNAL_DOWNLOADS]: The skill references and links to reputable legal resources including the official German federal laws website (gesetze-im-internet.de) and the dejure.org legal database for court case verification.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted user-supplied data, such as termination letters, payment histories, and eviction notices, which constitutes an attack surface where embedded instructions could attempt to influence the agent's reasoning.
- Ingestion points: Inputs defined in SKILL.md (Kündigungsgrund, Mietkonto, Abmahnungen, Kündigungsschreiben).
- Boundary markers: None identified in the prompt templates.
- Capability inventory: Execution of local Python scripts for calculations as described in the Sub-Agent-Architektur.
- Sanitization: No explicit sanitization or filtering of input content is described.
Audit Metadata