Arbeitsrecht & Bürgergeld

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only German benefits and jobcenter legal-template skill; it is coherent, but users should avoid oversharing sensitive personal, medical, or financial details.

Use the templates as drafts, not legal advice. Verify current law, deadlines, and court requirements with official sources or a qualified adviser, and redact or omit unnecessary personal, medical, financial, and family details before sharing drafts in chat or submitting attachments.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The template solicits a broad set of personal data including name, address, birth date, phone, email, and customer number, but provides no minimization guidance, privacy notice, or caution about how users should share and store that information. In a legal-assistance context, users may copy this into chats, emails, or third-party tools, increasing the risk of unnecessary exposure of personally identifiable information.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The template explicitly asks for health-related suitability information and a medical certificate, which is special-category personal data and carries elevated privacy and misuse risks. Without a warning or limiting guidance, users may disclose sensitive medical details more broadly than necessary, especially when using AI-assisted drafting workflows.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The template instructs users to attach highly sensitive documents such as account statements, medical certificates, and personal identifiers, but it provides no privacy minimization, redaction, or secure-handling guidance. In a legal-aid context, users are likely to paste or upload real data verbatim, increasing the risk of unnecessary disclosure of health, financial, and identity information to third parties, logs, or downstream systems.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: This template provides procedural legal content and a ready-to-file court pleading without a clear disclaimer that it is not legal advice and may be invalid or harmful if the statutory prerequisites are not actually met. In this skill context, users are likely to rely on the wording directly in real disputes with a Jobcenter or Sozialgericht, so omission of a suitability warning increases the risk of incorrect filing, missed alternatives such as interim relief, or procedural mistakes.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The template explicitly tells users to attach 'Alle relevanten Nachweise' and 'Ggf. ärztliche Bescheinigungen' without any minimization or privacy guidance. In a welfare and jobcenter context, users may submit more personal, financial, or medical data than necessary, increasing exposure of highly sensitive information through over-disclosure, unnecessary copying, or insecure transmission.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The template explicitly prompts users to include sensitive health and family information such as illness details, medical certificates, and caregiving circumstances, but provides no privacy-minimization guidance. In a legal-assistance skill, users are likely to paste or generate highly identifying special-category personal data, increasing the risk of unnecessary disclosure, oversharing to third parties, or retention in logs and downstream systems.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal