skills/klotzkette/claude-fuer-deutsches-recht/us-open-source-license-enforcement/Gen Agent Trust Hub
us-open-source-license-enforcement
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted external data, which introduces a potential surface for indirect prompt injection.
- Ingestion points: The skill instructions in SKILL.md specify that the agent must analyze external documents such as 'Verwaltungsakte', 'Vertragsurkunden', 'Schriftsätze', 'Bescheide', and 'Sachverständigengutachten'.
- Boundary markers: There are no explicit delimiters or instructions for the agent to disregard instructions that may be embedded within these analyzed documents.
- Capability inventory: The skill lacks dangerous execution capabilities; its activities are restricted to legal analysis and document generation without requesting shell access or unauthorized network operations.
- Sanitization: No sanitization or validation mechanisms are defined to filter the content of ingested legal documents before they are processed by the agent.
Audit Metadata