status
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes external case notes to generate legal summaries for clients, faculty, and courts. This ingestion of untrusted data is a potential consideration for indirect prompt injection.
- Ingestion points: Case notes enter the agent context during the summary generation process as described in SKILL.md.
- Boundary markers: The skill does not explicitly define delimiters or 'ignore' instructions for the ingested case notes, though it uses structured templates for its own output.
- Capability inventory: Analysis of SKILL.md confirms the skill possesses no capabilities for network operations, file system writes, or subprocess execution.
- Sanitization: There is no evidence of explicit input validation or sanitization of the case notes before they are processed by the agent.
- Local Path Reference: The skill loads jurisdiction and style guidelines from a configuration file at
~/.claude/plugins/config/claude-for-legal/legal-clinic/CLAUDE.md. This path is used to maintain consistency with professional standards and supervision requirements as part of the skill's core legal clinic functionality.
Audit Metadata