box-legal-workflows-contract
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
boxandbox-legal-workflowsdependencies from the official Box GitHub repository. These are verified vendor resources.- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external contract data which represents an ingestion surface for untrusted content. However, the instructions include appropriate safety measures, such as requiring attorney confirmation for all risk assessments and mandating that the AI provide citations for all extracted variances.
Audit Metadata