The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it is designed to ingest and analyze external, untrusted data.
Ingestion points: The skill instructions require the agent to read several types of external files, specifically Schriftsatz (pleadings), Versandmappe (shipping folders), Fristnotiz (deadline notes), and beA-Protokolle (transmission logs).
Boundary markers: The instructions do not define clear delimiters or provide 'ignore embedded instructions' warnings for the data being processed.
Capability inventory: The skill's primary function is data analysis and report generation; it does not contain capabilities for network operations, arbitrary file writing, or system command execution.
Sanitization: There are no specified procedures for sanitizing or filtering the content of the legal documents before they are processed by the agent.

bea-versand-pruefen