skills/klotzkette/claude-fuer-deutsches-recht/software-dokumentenmatrix-und-lueckenliste/Gen Agent Trust Hub
software-dokumentenmatrix-und-lueckenliste
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data such as case files, evidence, and documents, which represents a surface for indirect prompt injection where malicious instructions could be hidden in processed files.
- Ingestion points: The workflow involves processing 'Akteninhalt' (case content), 'Belege' (evidence), and 'Dokumente' (documents) as described in SKILL.md.
- Boundary markers: Absent; there are no specific instructions or delimiters used to isolate or ignore instructions embedded within the external content.
- Capability inventory: None; the skill contains no executable scripts, tool calls, or network requests within the provided file.
- Sanitization: Absent; the skill does not specify any validation or filtering for the ingested text to prevent instruction override.
Audit Metadata