output-builder-urheberrecht
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze untrusted external data, which is a potential vector for indirect prompt injection.\n
- Ingestion points: The skill requests external evidence including original files, contracts, and user-provided sources (SKILL.md).\n
- Boundary markers: No delimiters or safety warnings for embedded instructions are specified in the instructions.\n
- Capability inventory: The skill mentions verifying sources "live", implying the use of web browsing or search tools to fetch external legal data.\n
- Sanitization: There is no mention of sanitizing or filtering content from external documents before processing.
Audit Metadata