itr-saas-vertragstypen-praxis
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to process external, potentially untrusted documents such as contracts, legal briefs, and evidence. This represents a potential surface for indirect prompt injection. However, the skill lacks defined capabilities (tools or scripts) for writing to the file system or performing unauthorized network operations, which significantly mitigates the risk.
- [EXTERNAL_DOWNLOADS]: The skill references official and well-known legal databases (such as gesetze-im-internet.de, dejure.org, and openJur) for the purpose of verifying legal norms and case law. These references are appropriate for the skill's stated legal research purpose and target reputable domains.
Audit Metadata