skills/klotzkette/claude-fuer-deutsches-recht/gewerbesteuer-freibetrag-und-messbetrag/Gen Agent Trust Hub
gewerbesteuer-freibetrag-und-messbetrag
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data provided by the user, such as contracts, tax declarations, and invoices, creating a surface for indirect prompt injection.
- Ingestion points: The 'Arbeitsweg' section in SKILL.md specifies collecting and checking external documents like 'Werkvertrag/Dienstvertrag', 'Steuererklärung', 'Rechnung', and 'EÜR'.
- Boundary markers: The instructions lack specific requirements for delimiters or system instructions to ignore potential commands embedded within these analyzed documents.
- Capability inventory: While the skill itself focuses on analysis and table generation, the agent context likely includes file-read and text-generation capabilities.
- Sanitization: There is no evidence of sanitization or validation logic to filter out potentially malicious natural language instructions within the ingested documents.
Audit Metadata