ai-code-generation-ip
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of Markdown instructions and structured guidance for the agent to follow. There are no scripts, binaries, or automated tool configurations included.
- [INDIRECT_PROMPT_INJECTION]: The workflow requires the agent to ingest and analyze external evidence, contracts, and legal documents. This creates a surface where the agent might encounter untrusted data. However, the skill provides no executable capabilities (such as shell access, file writing, or network exfiltration) that could be exploited by such an injection, and it explicitly instructs the agent to verify all information against official legal databases.
- [EXTERNAL_DOWNLOADS]: The skill recommends verifying legal norms and case law using established, well-known German legal portals such as gesetze-im-internet.de, dejure.org, and openJur. These are authoritative sources for legal research and do not involve the execution of remote code.
Audit Metadata