skills/klotzkette/claude-fuer-deutsches-recht/abrechnung-telemedizin-videosprechstunde-goae/Gen Agent Trust Hub
abrechnung-telemedizin-videosprechstunde-goae
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown text and metadata in SKILL.md. There are no associated scripts, binaries, or automated configuration files.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for analyzing external documents such as contracts, administrative records, and correspondence. This represents an indirect prompt injection surface where untrusted data could attempt to influence the agent's output.
- Ingestion points: External documents, facts, and legal records referenced in the workflow in SKILL.md.
- Boundary markers: The skill suggests using
[offen: ...]to flag uncertain facts, though it lacks strict data delimiters. - Capability inventory: The instructions direct the agent to check live legal databases (e.g., gesetze-im-internet.de) using web search capabilities.
- Sanitization: No explicit sanitization or escaping mechanisms are defined within the instructions.
Audit Metadata