stakeholder-summary
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill reads and writes legal documentation to a dedicated plugin directory (~/.claude/plugins/config/claude-for-legal/). This is used for matter-specific context and state tracking within the legal automation environment.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from contract reviews and matter workspaces to generate its summaries. This creates a surface where malicious instructions embedded in a contract or review could attempt to influence the agent's output, particularly in the reconciliation of legal escalations.
- Ingestion points: matter.md, upstream review memos, and escalation draft files.
- Boundary markers: None explicitly mentioned for untrusted data.
- Capability inventory: File read/write access to specific plugin paths.
- Sanitization: Not specified; the skill relies on the agent's ability to translate legal terms into business language.
- [COMMAND_EXECUTION]: The instructions refer to other agent tools (e.g., /commercial-legal:matter-workspace, renewal-tracker, escalation-flagger) to be executed by the agent as part of the legal workflow. No direct shell command execution, unauthorized script spawning, or dynamic context injection was identified.
Audit Metadata