nutzungsrechte-lizenzkette
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external legal evidence and documents (contracts, administrative acts, etc.) provided by the user, which constitutes a surface for indirect instructions.
- Ingestion points: The skill instructions in
SKILL.mdspecify gathering and checking "Verwaltungsakte, Vertragsurkunden, Schriftsätze, Bescheide, Protokolle, Sachverständigengutachten." - Boundary markers: There are no explicit delimiters or instructions defined in the skill to distinguish between user data and instructions.
- Capability inventory: The skill is capable of generating structured text outputs, including memos, risk tables, and legal matrices.
- Sanitization: No methods for sanitizing or filtering instructions embedded within the ingested documents are specified.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to verify legal information using official and authoritative portals.
- Evidence: References to
gesetze-im-internet.de,dejure.org,eur-lex.europa.eu,openJur, and official German federal and state court databases are included for live verification of statutes and case law. - [NO_CODE]: The skill consists solely of markdown instructions for the AI agent and does not contain any scripts, executables, or software dependencies.
Audit Metadata