us-copyright-software-title17
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, such as case facts, legal documents, and contracts, creating a surface for indirect prompt injection attacks.
- Ingestion points: The skill instructs the agent to process "Sachverhalt" (facts), "Dokumente" (documents), "Verwaltungsakte" (administrative acts), and "Vertragsurkunden" (contracts) as described in the 'Arbeitsweg' and 'Intake-Fragen' sections of SKILL.md.
- Boundary markers: None identified. There are no explicit delimiters or instructions to ignore embedded commands within the processed legal documents.
- Capability inventory: No dangerous capabilities (subprocess calls, file-writes, or network operations) are enabled in the provided skill scripts or instructions.
- Sanitization: No sanitization, escaping, or filtering of the external content is mentioned in the workflow.
Audit Metadata