legal-red-team
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill employs local Python scripts (
legal_fact_checker.pyandlegal_quality_scorer.py) that perform non-privileged, rule-based text analysis to identify citations, dates, and numerical values. These scripts do not perform network operations, execute arbitrary code, or access sensitive system files. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted legal documents provided by users, creating an inherent surface for indirect prompt injection. However, the risk is negligible due to the highly restricted capability set of the analytical scripts.
- Ingestion points: User-provided text files are read through the
--inputflag in bothlegal_fact_checker.pyandlegal_quality_scorer.py. - Boundary markers: The methodology relies on an adversarial review mindset rather than programmatic delimiters or explicit instructions to ignore embedded commands.
- Capability inventory: Tool functionality is limited to reading text files and writing structured JSON reports to the local filesystem; there are no subprocess calls or dynamic execution capabilities.
- Sanitization: Input text is processed via regular expressions for extraction, and output is handled using standard JSON serialization, preventing malicious control flow redirection.
Audit Metadata