monitor-vertragsentwurf
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data which could contain malicious instructions aimed at influencing the agent's behavior.
- Ingestion points: The skill explicitly scans 'beA-Nachrichten' (electronic legal mail), 'Mandantenmails' (client emails), 'Akteninhalt' (case files), and 'Behördenbescheide' (authority notices) as specified in the 'Scanquellen' section of SKILL.md.
- Boundary markers: There are no explicit instructions, delimiters, or system-level warnings defined to isolate the processed content or instruct the agent to ignore embedded commands within the ingested documents.
- Capability inventory: The skill's primary capabilities involve reading diverse file formats and generating structured markdown reports. No high-risk capabilities like arbitrary shell execution or outbound network exfiltration were found in the skill logic.
- Sanitization: The workflow does not include specific sanitization, filtering, or schema validation steps for the text content extracted from external legal sources.
Audit Metadata