spezial-ausschliesslich-dokumentenmatrix-und-lueckenliste

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill does not contain any malicious code, prompt injections, or unauthorized data access patterns.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were detected.
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute any external scripts or packages.
  • [PROMPT_INJECTION]: The instructions focus entirely on the stated task of legal analysis and do not attempt to bypass safety filters or override system instructions.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user data such as contracts, notices, and messages (SKILL.md). This is a standard attack surface for indirect prompt injection. However, the risk is minimal because the skill lacks capabilities for command execution, file system writes, or network requests. Ingestion points include user-provided documents. There are no explicit boundary markers or sanitization steps defined in the instructions beyond the focus on legal norms.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 08:24 PM