erechnung

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external administrative and legal documents (e.g., contracts, administrative acts, and legal briefs), creating a surface for indirect prompt injection where malicious instructions embedded in those documents could attempt to influence the agent's behavior.
  • Ingestion points: Legal documents, case files, and administrative records provided by the user (as noted in the 'Arbeitsweg' section).
  • Boundary markers: The skill does not specify any delimiters or safety warnings to separate user-provided content from its internal instructions.
  • Capability inventory: The skill's primary function is restricted to producing textual markdown reports based on local templates in the assets/templates/ directory.
  • Sanitization: No specific input sanitization or content filtering for external documents is described.
  • [NO_CODE]: The analyzed skill file contains only markdown instructions and YAML configuration; it does not include shell scripts, source code, or instructions to install third-party dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 03:55 PM