model-weights-software-license
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional text guiding the AI agent through a legal analysis workflow. It does not include any executable scripts, binary files, or automated system commands.
- [SAFE]: The skill references established legal research domains such as gesetze-im-internet.de and dejure.org for verifying norms, which are standard resources for this use case.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external content provided by the user, which presents a surface for instructions embedded within the analyzed data.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: The agent is directed to process external evidence including 'Vertragsurkunden' (contracts) and 'Schriftsätze' (legal briefs) as specified in the SKILL.md file.
- [INDIRECT_PROMPT_INJECTION]: Boundary markers: There are no instructions for the agent to use specific delimiters or ignore commands found within the external documents.
- [INDIRECT_PROMPT_INJECTION]: Capability inventory: The skill does not request or utilize tools for shell execution, file system modifications, or network exfiltration.
- [INDIRECT_PROMPT_INJECTION]: Sanitization: The instructions do not contain steps for filtering, escaping, or validating the content of the documents being analyzed.
Audit Metadata