Security audit

Arbeitsrecht & Bürgergeld

Security checks for vulnerabilities and agentic risk

Overview

This is a German social-law drafting/reference skill with no executable code or hidden agent control, but users should verify legal accuracy and avoid over-sharing personal data.

Install only if you want German social-benefits and Jobcenter template assistance. Treat generated letters as drafts, verify deadlines and legal citations against official sources or a qualified adviser, and do not paste unnecessary identifiers, medical details, or full documents into chat unless they are needed for the specific draft.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (10)

YARA rule 'php_webshell_known': Known PHP webshell families (c99, r57, b374k, WSO, etc.) [webshells]

Critical

Category: YARA Match
Confidence: 90% confidence
Finding: YARA rule matched a known webshell pattern (PHP, Python, JSP, or ASPX webshell).
Content: Scanner excerpt · references/eskalation.md (reported line 53)May include surrounding context.
md
�bernahme von Verfahren | | **Mitgliedschaft** | Ca. 4-8 €/Monat | | **Website** | https://www.sovd.de | | **Hotline** | 030 - 26 39 90 | **Leistungen:** - Bürgergeld-Beratung - Widerspruchsverfahren - Sozialgerichtliche Vertretung - Eingliederungsvereinbarungen ### Weitere Verbände | Verband | Schwerpunkt | Website | |---------|--------------|---------| | **Sozialverband VdK** | Senioren, Behinderte, Bürgergeld | https://www.vdk.de | | **Sozialverband SoVD** | Allgemeines Sozialrecht | https://www.sovd.de | | **Sozialverband Deutschland** | Arbeitslose, Bürgergeld | https://www.sozialverband.de | | **Bundesarbeitsgemeinschaft der Senioren-Organisationen (BAGSO)** | Senioren | https://www.bagso.de | | **Deutscher Behindertenrat** | Behindertenrecht | https://www.behindertenrat.de | --- ## Rechtsanwälte ### Fachanwälte für Sozialrecht | Kriterium | Details | |-----------|---------| | **Qualifikation** | Fachanwalt für Sozialrecht | | **Kosten** | Beratungshilfe (für B�

YARA rule 'php_webshell_known': Known PHP webshell families (c99, r57, b374k, WSO, etc.) [webshells]

Critical

Category: YARA Match
Confidence: 90% confidence
Finding: YARA rule matched a known webshell pattern (PHP, Python, JSP, or ASPX webshell).
Content: Scanner excerpt · references/gesetze.md (reported line 30)May include surrounding context.
md
rüfung, Einkommensgrenzen | | §11 SGB II | Zu berücksichtigendes Einkommen | Einkommensarten, Anrechnung | | §12 SGB II | Zu berücksichtigendes Vermögen | Vermögensfreibeträge, Schonvermögen | ### Leistungen | Paragraph | Titel | Relevanz | |-----------|-------|----------| | §19 SGB II | Bürgergeld | Regelbedarf, Kosten der Unterkunft | | §21 SGB II | Mehrbedarfe | Alleinerziehende, Behinderte, Schwangere | | §22 SGB II | Kosten der Unterkunft | Miete, Nebenkosten, Heizkosten | | §24 SGB II | Einmalige Leistungen | Erstausstattung, Anschaffungen | ### Eingliederungsleistungen | Paragraph | Titel | Relevanz | |-----------|-------|----------| | §29 SGB II | Grundsatz der Eingliederung | Ziel: Beendigung der Hilfebedürftigkeit | | §30 SGB II | Eingliederungsleistungen | Überblick über Maßnahmen | | §31 SGB II | Pflichtverletzungen | Sanktionsgründe | | §31a SGB II | Minderung der Leistungen | Sanktionshöhe (30%, 60%, 100%) | | §31b SGB II | Verfahren bei Pflic

YARA rule 'php_webshell_known': Known PHP webshell families (c99, r57, b374k, WSO, etc.) [webshells]

Critical

Category: YARA Match
Confidence: 90% confidence
Finding: YARA rule matched a known webshell pattern (PHP, Python, JSP, or ASPX webshell).
Content: Scanner excerpt · references/urteile.md (reported line 111)May include surrounding context.
md
rmögensfreibeträge | Schonvermögen | ### LSG-Urteile zum Bürgergeld | Aktenzeichen | Datum | Kernaussage | Relevanz | |--------------|-------|-------------|----------| | L 7 AS 123/18 | 15.05.2019 | Angemessene Miete nach Produkttheorie | Mietberechnung | | L 14 AS 67/17 | 22.08.2018 | Bürgergeld bei Selbstständigkeit | Einkommensanrechnung | | L 2 AS 445/16 | 10.03.2017 | Mehrbedarf für behinderte Menschen | Behinderten-Mehrbedarf | --- ## Eingliederungsvereinbarung ### BSG-Urteile zur Eingliederungsvereinbarung | Aktenzeichen | Datum | Kernaussage | Relevanz | |--------------|-------|-------------|----------| | B 14 AS 19/17 R | 08.02.2018 | Eingliederungsvereinbarung muss konkret sein | Bestimmtheitsgebot | | B 14 AS 7/16 R | 23.11.2016 | Keine Sanktion bei unklaren Pflichten | Transparenzgebot | | B 14 AS 13/15 R | 02.09.2015 | Mitwirkungspflichten müssen zumutbar sein | Zumutbarkeit | | B 14 AS 2/14 R | 19.02.2014 | Eingliederungsvereinbarung ist Verwaltungsakt | Rec

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The description states 'Deutschsprachiger KI-Assistent', which imposes a specific language for the skill. Under the policy criteria, forcing a language or locale without user opt-in is a natural-language policy violation unless the constraint is clearly documented and justified as region-specific; here the skill is German-law specific, but the text does not explicitly frame the language restriction as an optional or justified locale choice.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The template incorrectly treats Bildungsgutschein and AVGS as the same funding instrument, which can mislead users into submitting legally inaccurate applications. In a social-benefits/legal-assistance skill, this creates a meaningful risk of rejected requests, missed opportunities, or procedural disadvantage because users may rely on the document as authoritative.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The template asks users to include a broad set of personal data, including contact details, birth date, customer number, benefit status, and potentially medical information, without any minimization guidance or privacy warning. In a legal-assistance context, users may copy this into AI chats, email, or shared systems, increasing the chance of unnecessary exposure of sensitive and special-category data.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire skill file, including instructions and template text, is presented exclusively in German. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified, which is not stated in the file.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The document gives concrete, time-sensitive procedural guidance for objections, lawsuits, interim relief, and deadlines without a prominent disclaimer that it is general information rather than legal advice. In a legal-help skill, users may rely on this as authoritative guidance and miss rights or deadlines if the content is incomplete, outdated, or not tailored to their case.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 77% confidence
Finding: A natural-language policy issue can arise when a skill effectively forces one language without user opt-in or documented justification. This file contains only German-language instructions and headings, with no statement that the skill is Germany-specific or that language alternatives are unavailable by design.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all headings, instructions, and content exclusively in German, with no indication that the user can opt into another language or that the file is intentionally limited to a German-language or region-specific audience.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.