algorithmic-collusion-ai-pricing
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external evidence, data analysis files (PoS/Scanner data), and legal documents such as 'Form CO' and 'Marktbefragung'. This creates a surface where malicious instructions could be embedded in the processed data to influence the agent's reasoning or output.
- Ingestion points: The skill explicitly mentions gathering 'Dokumente und Beweismittel', 'Form CO', 'Datenanalyse (PoS/Scanner)', and 'Marktbefragung' (in SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands in external data are provided.
- Capability inventory: The agent is tasked with creating a risk matrix ('Risikoampel') and proposing 'next steps', which involves high-level reasoning over the ingested content.
- Sanitization: The skill does not define any sanitization or validation steps for the content of the ingested legal or data files.
Audit Metadata