export-control-sanctions-software
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external case data and legal documents, which establishes a potential surface for indirect prompt injection.
- Ingestion points: The workflow in
SKILL.mdinstructs the agent to process user-provided case facts ('Sachverhalt'), administrative acts ('Verwaltungsakte'), contract documents ('Vertragsurkunden'), and expert reports ('Sachverständigengutachten'). - Boundary markers: There are no specific delimiters or instructions provided to the agent to ignore or treat embedded commands within the ingested text as data rather than instructions.
- Capability inventory: The skill itself is purely instructional and does not include scripts, subprocess calls, or network-writing capabilities.
- Sanitization: The skill lacks explicit instructions for the validation, escaping, or sanitization of the external content before it is incorporated into the agent's context.
Audit Metadata