The Agent Skills Directory

[PROMPT_INJECTION]: The skill uses professional instructional language to guide the agent through legal analysis and reporting. No attempts to override safety filters, bypass constraints, or extract system prompts were detected.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill references official government websites and authoritative legal databases (e.g., lda.brandenburg.de, gesetze-im-internet.de, openJur). No hardcoded credentials, sensitive local file paths, or network exfiltration patterns to unknown domains were identified.
[OBFUSCATION]: The instructions are written in clear, human-readable German. No Base64 encoding, zero-width characters, homoglyphs, or other hidden content techniques were found.
[UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill does not include any package installation commands or remote script execution patterns. It is purely instructional content.
[PRIVILEGE_ESCALATION]: No commands for acquiring elevated permissions, such as sudo, chmod, or Windows administrative overrides, are present.
[PERSISTENCE_MECHANISMS]: There are no attempts to establish persistence on a host system through shell profiles, cron jobs, or registry modifications.
[METADATA_POISONING]: The metadata fields (name and description) accurately reflect the skill's purpose and content without deceptive instructions.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data sources including administrative files, contracts, and evidence records.
Ingestion points: External legal documents and administrative records provided by the user.
Boundary markers: None identified in the skill instructions.
Capability inventory: Text structuring and generation; no technical capabilities (subprocess, eval, network ops) are utilized.
Sanitization: Not specified.
Assessment: The skill creates an attack surface by ingesting external data, but the lack of exploitable technical tools minimizes the risk.
[TIME_DELAYED_CONDITIONAL_ATTACKS]: No logic was found that gates actions based on date, time, or specific environmental conditions.
[DYNAMIC_EXECUTION]: The skill does not generate, compile, or execute code at runtime.
[DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic shell command execution placeholders.

dsv-meldung-lda-brandenburg