uk-software-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it is designed to ingest and process untrusted external data.
- Ingestion points: In
SKILL.md, the skill is instructed to process 'Dokumente' (documents), 'Vertragsurkunden' (contracts), and 'Beweismittel' (evidence) provided by the user or client. - Boundary markers: The instructions lack explicit boundary markers or warnings to the agent to disregard instructions potentially embedded within these external documents.
- Capability inventory: The skill is restricted to generating text-based legal artifacts such as memos, issue lists, and counsel briefings. It does not contain any capabilities for command execution, network exfiltration, or file system modifications.
- Sanitization: No sanitization or validation logic is specified for the external data being analyzed.
Audit Metadata