arbeitnehmeraehnliche-selbstaendige

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data such as legal contracts, tax declarations, and other evidence provided for assessment.\n
  • Ingestion points: The instructions require gathering documents like "Werkvertrag/Dienstvertrag" (contracts) and "Steuererklärung" (tax returns) as found in SKILL.md.\n
  • Boundary markers: There are no explicit delimiters or instructions to ignore potentially malicious content embedded within these external documents.\n
  • Capability inventory: The skill generates textual reports, document plans, and to-do lists within SKILL.md; it does not request dangerous tool access.\n
  • Sanitization: Input documents are analyzed without a defined sanitization or validation process.\n- [SAFE]: The skill references established German government and public service domains (e.g., gesetze-im-internet.de, elster.de, deutsche-rentenversicherung.de, arbeitsagentur.de) for verifying current laws and thresholds. This behavior is consistent with its primary purpose and uses trusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:03 PM