adequate-protection
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown-based instructions for an AI agent to follow during legal research. It does not include any scripts (Python, JavaScript, shell), configuration files, or executable binaries.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided legal documents and data. While it lacks any tool-calling or shell-execution capabilities that could be abused via malicious instructions in the data, the process of summarizing external legal content inherently carries a low risk of content-based manipulation. However, the skill explicitly instructs the agent to verify all findings against official legal databases (such as gesetze-im-internet.de and eur-lex.europa.eu), which serves as a mitigation against hallucinations or injected misinformation.
- [DATA_EXPOSURE_EXFILTRATION]: There are no network operations, API calls, or file system access patterns present. The skill provides a framework for manual or agent-assisted legal research without implementing automated data transfer mechanisms.
Audit Metadata