deadlines

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Indirect Prompt Injection Surface: The skill ingests data from local files, including a case ledger (deadlines.yaml) and configuration files (CLAUDE.md), to generate deadline reports. This represents a potential surface where malformed or untrusted data within these files could attempt to influence the agent's behavior during report generation.
  • Ingestion points: Key data sources include ~/.claude/plugins/config/claude-for-legal/legal-clinic/deadlines.yaml and jurisdiction-specific reference files located in references/plausibility-bands/.
  • Boundary markers: The skill does not explicitly define markers or delimiters to separate ingested data from instructions.
  • Capability inventory: The skill is limited to reading and writing local configuration files. It does not utilize tools for network communication, arbitrary shell command execution, or dynamic code evaluation.
  • Sanitization: The instructions do not describe specific sanitization or validation logic for the content of the data files before it is processed into the final report output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:02 PM