dsv-vvt-update-nach-vorfall
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external sources, representing a potential attack surface for indirect prompt injection.
- Ingestion points: External legal databases (gesetze-im-internet.de, dejure.org, openJur) and client-provided case files (contracts, protocols, expert reports).
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the processed data are defined.
- Capability inventory: The skill is limited to text generation for legal checklists and does not utilize file writes, network requests, or shell execution.
- Sanitization: No explicit sanitization or validation of the content retrieved from external sources is described.
- [SAFE]: No other security concerns such as hardcoded credentials, malicious obfuscation, or unauthorized network operations were identified. The referenced legal resources are well-known and appropriate for the skill's stated purpose.
Audit Metadata