israeli-employment-contract-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted external data (employment contracts) provided by the user, which creates a potential surface for indirect prompt injection.
- Ingestion points: Users are instructed to paste the full text of their employment contracts for analysis (referenced in
SKILL.mdandSKILL_HE.md). - Boundary markers: The instructions lack explicit boundary markers or instructions to ignore potential commands embedded within the contract text.
- Capability inventory: The skill utilizes a local Python script (
scripts/contract_sanity_check.py) for numerical validation and produces text-based reports. It does not utilize network access or sensitive system tools. - Sanitization: No specific sanitization or escaping mechanisms for the user-provided content are described in the instructions.
Audit Metadata