verjaehrung-pruefung
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform deterministic date calculations using a local Python module (
scripts.legal_calc.cli). This tool is used to compute expiration dates based on legal rules from the German Civil Code (BGB). - Evidence:
python -m scripts.legal_calc.cli verjaehrung --entstehung 10.03.2023 --kenntnis 05.07.2023inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user-provided data (e.g., claim descriptions, dates of knowledge) and extract values for interpolation into command-line arguments and legal analysis.
- Ingestion points: User-provided 'Anspruch' (claim) details and event dates.
- Boundary markers: Absent. The skill does not define specific delimiters for untrusted input.
- Capability inventory: Invokes a Python CLI tool via subprocess calls in the
researcheranddrafterstages. - Sanitization: The instructions do not specify sanitization or validation of the extracted dates before they are passed to the shell command.
Audit Metadata