legal-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (legal contracts) during the intake and extraction phases, creating a potential surface for indirect prompt injection.
- Ingestion points: 'Document intake' protocol (SKILL.md).
- Boundary markers: Absent; the skill does not define specific delimiters to separate user data from instructions.
- Capability inventory: No tools, code execution, or network capabilities are defined in the skill.
- Sanitization: Absent; the instructions do not specify any filtering or sanitization of ingested content.
Audit Metadata