rechte-an-rechteclearing-ki-sync
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it is designed to process external, untrusted data provided by users.
- Ingestion points: The skill instructs the agent to collect and analyze external documents including 'Verwaltungsakte, Vertragsurkunden, Schriftsätze, Bescheide, Protokolle, Sachverständigengutachten' (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or guidelines for the agent to distinguish between its own instructions and potentially malicious instructions embedded in the analyzed documents.
- Capability inventory: The skill focuses on textual analysis and generating a 'Prüf- oder Entscheidungsmatrix'. It does not contain capabilities for file system writes, network exfiltration, or arbitrary command execution.
- Sanitization: There are no instructions for sanitizing or filtering input data before processing.
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any executable scripts, binary files, or automated installation steps, which limits the potential for direct system compromise.
Audit Metadata