skills/klotzkette/claude-fuer-deutsches-recht/erp-abnahme-nachtraege-belegabgleich/Gen Agent Trust Hub
erp-abnahme-nachtraege-belegabgleich
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from contracts, tickets, and correspondence. This creates a vulnerability surface where malicious instructions hidden in these files could potentially manipulate the agent's behavior.\n- Ingestion points: The skill reads contracts, tickets, and correspondence as specified in Section 2.\n- Boundary markers: There are no instructions for using delimiters or warnings to ignore instructions within the processed data.\n- Capability inventory: The skill is capable of writing document drafts to the file system (Section 5) and reading local project files.\n- Sanitization: No sanitization or validation of the external content is described in the workflow.\n- [EXTERNAL_DOWNLOADS]: Fetches reference legal texts and court rulings from official government and judicial websites (gesetze-im-internet.de and bundesgerichtshof.de).
Audit Metadata