skills/klotzkette/claude-fuer-deutsches-recht/us-independent-contractor-assignment/Gen Agent Trust Hub
us-independent-contractor-assignment
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external legal documents such as contracts, administrative acts, and briefs.
- Ingestion points: The skill instructions specify collecting "Verwaltungsakte, Vertragsurkunden, Schriftsätze, Bescheide, Protokolle" (administrative acts, contracts, pleadings, decisions, protocols) in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious embedded instructions within these documents.
- Capability inventory: The skill does not define or use any tools for file writing, system command execution, or network exfiltration.
- Sanitization: No sanitization or filtering of external content is specified.
- Note: While an attack surface exists, the lack of dangerous capabilities makes this finding a low-risk architectural observation rather than an exploitable threat.
Audit Metadata