verlagsrecht-buch-ebook
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external documents, evidence, and legal records, which creates a potential surface for indirect prompt injection attacks where malicious instructions could be embedded in the processed data.
- Ingestion points: The skill explicitly requests user-provided documents, including publishing contracts, evidence files (Originaldateien), and administrative acts (SKILL.md).
- Boundary markers: There are no specific delimiters or instructions provided to the agent to distinguish between its core logic and instructions that might be contained within the analyzed documents.
- Capability inventory: The skill primarily performs text analysis and legal evaluation; it does not possess dangerous capabilities like arbitrary command execution, network writes, or file system modifications.
- Sanitization: The skill does not define any input validation or sanitization procedures for the external content it processes.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to verify legal information using live data from authoritative and well-known sources including gesetze-im-internet.de, dejure.org, openJur, and official EU databases (eur-lex.europa.eu).
Audit Metadata