dsv-meldung-baylda
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions and informational templates. It does not include any scripts, executables, or automated command-line operations.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and official legal resources for verifying laws and contact information, such as lda.bayern.de, gesetze-im-internet.de, and dejure.org. These are standard references for the skill's legal compliance purpose and originate from official sources.
- [DATA_EXFILTRATION]: While the skill involves the collection of sensitive data (such as information about a data breach), this is the primary and legitimate purpose of the skill (creating a GDPR Art. 33 report). The instructions direct this data to official channels (e.g., the BayLDA poststelle email or online portal) rather than unauthorized third-party servers.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data, as it processes details about a data breach provided by a user to populate a report template.
- Ingestion points: User-provided breach details and referenced documents (Verwaltungsakte, contracts).
- Boundary markers: Absent.
- Capability inventory: Text formatting and information synthesis; instructions suggest manual verification of URLs before use.
- Sanitization: Absent. Given that the output is intended for human review and formal legal submission, the risk is minimal.
Audit Metadata