source-code-escrow
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external documentation provided by users, such as contracts, administrative acts, and technical descriptions. This creates a potential surface for indirect prompt injection if the processed data contains malicious instructions meant to override the agent's behavior. However, the skill provides no tools for file system modification, network exfiltration, or code execution, which significantly limits the impact of such an attack.
- Ingestion points: The workflow identifies 'Dokumente und Beweismittel' (documents and evidence) such as contracts and legal briefs as primary inputs.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the ingested data are defined.
- Capability inventory: The skill is strictly instructional and does not define any automated tools or scripts.
- Sanitization: No sanitization or filtering of input content is specified.
Audit Metadata