arbeitnehmer-software-beta-pilot

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data provided by the user, such as legal contracts, administrative acts, and expert reports, for the purpose of analysis.
  • Ingestion points: The workflow involves gathering and reviewing documents like "Verwaltungsakte", "Vertragsurkunden", and "Schriftsätze" (found in SKILL.md).
  • Boundary markers: No specific delimiters or instructions to ignore embedded content are present in the guidelines.
  • Capability inventory: The skill is limited to textual analysis and report generation; it does not possess capabilities for arbitrary command execution, file system modification, or network exfiltration.
  • Sanitization: There are no explicit instructions to sanitize or validate the content of the ingested legal documents.
  • [NO_CODE]: The skill contains no executable scripts (Python, Node.js, Shell, etc.) or binary components, which significantly limits the potential for technical exploitation.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known and official German legal databases for information verification.
  • Trusted Sources: It suggests cross-referencing information using official domains and services such as gesetze-im-internet.de, dejure.org, and openJur. These references are used for legitimate legal research purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:25 PM