deadlines
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill ingests data from local files, including a case ledger (
deadlines.yaml) and configuration files (CLAUDE.md), to generate deadline reports. This represents a potential surface where malformed or untrusted data within these files could attempt to influence the agent's behavior during report generation. - Ingestion points: Key data sources include
~/.claude/plugins/config/claude-for-legal/legal-clinic/deadlines.yamland jurisdiction-specific reference files located inreferences/plausibility-bands/. - Boundary markers: The skill does not explicitly define markers or delimiters to separate ingested data from instructions.
- Capability inventory: The skill is limited to reading and writing local configuration files. It does not utilize tools for network communication, arbitrary shell command execution, or dynamic code evaluation.
- Sanitization: The instructions do not describe specific sanitization or validation logic for the content of the data files before it is processed into the final report output.
Audit Metadata