skills/klotzkette/claude-fuer-deutsches-recht/posteingang-ausgang-sekretariats-tagesbrief/Gen Agent Trust Hub
posteingang-ausgang-sekretariats-tagesbrief
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses purely instructional language focused on legal workflows. There are no attempts to override agent instructions, bypass safety filters, or extract system prompts.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive system file paths were detected. The skill describes an organized storage structure for legal documents (mandate folders) and log files, which is consistent with its administrative purpose.
- [OBFUSCATION]: No hidden text, encoded commands, homoglyphs, or zero-width characters were found in the file.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code execution or download external scripts. It references internal skills like 'mandantenakte-anlegen' and 'versand-vor-check' for modular functionality, which is a standard platform feature.
- [PRIVILEGE_ESCALATION]: No administrative or root-level command execution (like sudo or chmod) is requested.
- [PERSISTENCE]: No mechanisms for maintaining persistent access, such as modifying startup scripts or cron jobs, are present.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external mail data, the workflow is designed for manual entry into structured logs (YAML/JSONL). The instructions prioritize verification of official sources and do not interpolate untrusted data into executable contexts.
- [DYNAMIC_CONTEXT_INJECTION]: There are no dynamic command execution placeholders (like !
command) found in the instructions.
Audit Metadata