chronology

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • Legal Workflow Safeguards: The skill includes robust procedural checks, such as a 'Privilege gate' that requires users to define a posture (cleared, mixed, or aborted) before processing documents. This is a positive security and ethical feature designed to prevent accidental data exposure or waiver of privilege.\n- Project-Specific Resource Management: The skill interacts with files in the ~/.claude/plugins/config/claude-for-legal/ directory. These paths are consistent with the skill's role as a specialized tool for legal matter management and do not indicate unauthorized file system access.\n- Integration with Professional Services: The skill identifies and utilizes eDiscovery connectors (e.g., Everlaw, Relativity, DISCO) to pull document metadata. These represent integrations with well-known, industry-standard legal technology services and are used according to the skill's primary purpose.\n- Data Processing Ingestion Surface: As its core function, the skill processes untrusted external data (PDFs, emails, .docx files). While this creates a surface for indirect prompt injection, the skill mitigates this through transparency and human-in-the-loop verification.\n
  • Ingestion points: Processes documents from user-provided paths, shared drives, and eDiscovery connectors (SKILL.md).\n
  • Boundary markers: The skill does not explicitly define character-based delimiters for the extracted text but uses structured output formats to isolate facts.\n
  • Capability inventory: Reading and writing local matter files and accessing external metadata via authenticated MCP connectors.\n
  • Sanitization: Employs [SME VERIFY] tags for all extracted significance calls and privilege flags, ensuring that an expert reviews the model's output before it is used in legal work product.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 09:24 PM