employment-contract-software-engineer-de

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided legal documents, which constitutes an attack surface for indirect prompt injection. * Ingestion points: External documents such as 'Verwaltungsakte, Vertragsurkunden, Schriftsätze, Bescheide, Protokolle, Sachverständigengutachten' (SKILL.md). * Boundary markers: None identified; instructions do not explicitly tell the agent to ignore instructions embedded within the analyzed documents. * Capability inventory: No dangerous capabilities (file system writes, network operations, or shell execution) are requested or present in the skill. * Sanitization: None identified for user-provided data.
  • [SAFE]: The skill consists entirely of instructional text without any embedded code, scripts, or external dependencies. It encourages the use of official, trusted government databases for legal research.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:25 PM