eidas-electronic-signatures-software

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is purely instructional and provides a framework for legal reasoning and analysis within the context of eIDAS and German law. No malicious patterns, obfuscation, or data exfiltration attempts were detected.
  • [NO_CODE]: The skill consists solely of markdown instructions and does not include any scripts, dependencies, or tool invocations.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as case facts and legal documents. 1. Ingestion points: Case facts (Sachverhalt), contract documents (Vertragsurkunden), and legal evidence. 2. Boundary markers: The skill does not provide explicit delimiters to separate user data from instructions. 3. Capability inventory: No dangerous tools, shell commands, network operations, or file-writing capabilities are defined or utilized. 4. Sanitization: No explicit sanitization of user-provided content is defined. Although the attack surface exists, the lack of exploitable tools makes this a safe implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:26 PM