research-start
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [Local File Access]: The skill retrieves jurisdictional context and practice area information by reading from a specific local path (~/.claude/plugins/config/claude-for-legal/legal-clinic/CLAUDE.md). This localized access is used to retrieve 'seed documents' and configuration data relevant to the legal clinic's operations.
- [Data Synthesis Surface]: The skill is instructed to process and synthesize research documents uploaded by users to identify gaps. While this processing of external data constitutes a surface for indirect prompt injection, the skill lacks high-risk capabilities like arbitrary command execution or network access, which effectively mitigates potential impacts.
- [Tool Guidance]: The instructions provide guidance on using external research platforms like Westlaw and CourtListener. These suggested interactions are limited to search query generation and do not involve the skill performing unauthorized network operations or automated data exfiltration.
Audit Metadata