skills/klotzkette/claude-fuer-deutsches-recht/fachanwalt-it-recht-cyber-vorfall-sofortmassnahmen/Gen Agent Trust Hub
fachanwalt-it-recht-cyber-vorfall-sofortmassnahmen
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown text (SKILL.md) and does not include any scripts (Python, JavaScript, Shell) or executable files.
- [SAFE]: No malicious patterns such as credential theft, network exfiltration, or persistence mechanisms were detected. The skill provides standard legal frameworks and templates for incident response in German.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided information about cyber incidents, which represents a theoretical attack surface.
- Ingestion points: The agent is instructed to collect details from the user about the incident (e.g., Ransomware messages, data leak content) as described in the 'Kaltstart-Rückfragen' section of SKILL.md.
- Boundary markers: No specific delimiters or warnings for the agent to ignore instructions embedded in user-provided incident data are present.
- Capability inventory: The skill has no listed tool capabilities, script executions, or network operations, significantly mitigating the risk of exploitation.
- Sanitization: Not applicable as the skill contains no logic or code for processing data.
Audit Metadata