vorvertragliche-phase
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is purely instructional and template-oriented, focusing on German civil law (BGB) and the Trade Secrets Protection Act (GeschGehG). No indicators of malicious behavior, obfuscation, or unauthorized access were found.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external legal documents (e.g., NDAs, LOIs) and case facts provided by the user. While it does not explicitly define sanitization or boundary markers for this data, its execution is limited to text-based research, drafting, and reviewing. It does not utilize capabilities that would allow for command execution or network exfiltration based on malicious input.
- [EXTERNAL_DOWNLOADS]: The skill references legal statutes hosted on
gesetze-im-internet.de, which is the official portal of the German Federal Ministry of Justice. These are well-known, trusted resources for legal research and do not represent a security risk. - [COMMAND_EXECUTION]: The skill defines a sub-agent architecture (researcher, drafter, reviewer) using relative file paths within the same repository. This is standard configuration for complex agent tasks and does not involve the execution of untrusted shells or system commands.
Audit Metadata