versand-check-weihnachtskarten
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a strictly controlled workflow for verifying legal documents and deadlines. No malicious instructions or suspicious code patterns were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data such as legal documents (PDF/DOCX) and case metadata. While this creates an ingestion point for potential indirect prompt injection, the skill acts primarily as a checklist and audit logger. It lacks risky capabilities such as remote code execution, script generation, or network exfiltration, which significantly mitigates the risk.
- [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were detected. The skill uses local file paths (e.g.,
mandate/<az>/...) for document storage and audit logging, which is consistent with its stated purpose in a legal practice environment. - [COMMAND_EXECUTION]: The instructions do not contain shell commands, subprocess invocations, or any dynamic context injection patterns (
!command).
Audit Metadata