plagiatsanalyse-musik-text
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data during its workflow, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill processes user-provided 'Verwaltungsakte', 'Vertragsurkunden', 'Schriftsätze', 'Bescheide', 'Protokolle' and 'Originaldateien' as defined in the 'Arbeitsweg' and 'Sofortstart' sections.
- Boundary markers: There are no instructions defining how to safely delimit or parse this external content to prevent the agent from following instructions embedded within the data.
- Capability inventory: No dangerous system capabilities such as shell execution or unauthorized network exfiltration were identified in the skill instructions.
- Sanitization: No sanitization or validation logic is present for the ingested data.
- [SAFE]: The skill references well-known official legal databases and government portals for verifying legal norms.
- Evidence: The skill instructs the agent to check 'gesetze-im-internet.de', 'dejure.org', 'eur-lex.europa.eu', and official German federal and state portals.
Audit Metadata