skills/klotzkette/claude-fuer-deutsches-recht/gema-gvl-verwertungsgesellschaften/Gen Agent Trust Hub
gema-gvl-verwertungsgesellschaften
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze potentially untrusted data sources, such as platform posts, AI-generated outputs, and prompt logs.
- Ingestion points: Data enters the context via user-provided documents, screenshots, and logs mentioned in the 'Sofortstart' and 'Prüflogik' sections (SKILL.md).
- Boundary markers: The skill does not explicitly define delimiters for this external data, but it emphasizes verification against official sources.
- Capability inventory: The skill focus is on generating text-based analysis (memos, checklists). It does not contain instructions for writing to the file system or executing shell commands.
- Sanitization: The instructions focus on manual verification of content against legal databases rather than technical sanitization.
- [EXTERNAL_DOWNLOADS]: The instructions require the agent to perform 'live checks' by accessing official German and European legal databases (e.g., gesetze-im-internet.de, dejure.org, openJur, and eur-lex.europa.eu). These are authoritative public resources and well-known services used for legal verification. These references are used for standard information retrieval and do not involve executing remote code.
Audit Metadata