dsv-meldung-lfd-niedersachsen
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown text for legal professionals. It does not contain any executable scripts, remote code downloads, or command-line instructions.
- [SAFE]: All external references, such as gesetze-im-internet.de, dejure.org, and lfd.niedersachsen.de, are trusted official government or legal databases.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external case data (data breach details) to generate reports. This is the primary intended function and represents a low-risk attack surface as no dangerous tools (e.g., shell access, file writes) are requested or available.
- Ingestion points: User-provided breach details, data categories, and technical descriptions are gathered to populate the report.
- Boundary markers: The skill utilizes the structured 'Berlin Gold Standard' framework to organize and delimit the processed information into blocks.
- Capability inventory: No tools for file system access, network operations, or shell execution are present in the skill's environment.
- Sanitization: The skill provides natural language instructions for the agent to categorize and report data accurately without programmatic sanitization logic.
Audit Metadata