legal-skill-evaluation
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The framework uses
subprocess.runacross multiple scripts to automate evaluation tasks. scripts/evaluation_package_gate.pyexecutesgitcommands (rev-parse,ls-files) to enumerate tracked files for hashing.evals/contract-calibration-260730/contract_copilot_micro_probe.pyexecutessys.executableto run Python code snippets for report rendering and integrity checks.- [DYNAMIC_EXECUTION]: The evaluation probes dynamically load modules from the skill being audited.
evals/contract-calibration-260730/contract_copilot_micro_probe.pymodifiessys.pathand usesimportlib.reloadto load and test internal logic from the candidate skill directory (e.g.,scripts.report.reporting,scripts.review.review_runtime).- [INDIRECT_PROMPT_INJECTION]: The skill processes external test materials and legal documents which could contain embedded instructions.
- Ingestion points: Materials located in
evals/case-analysis-20260808/materials/andevals/litigation-analysis-20260808/materials/. - Boundary markers: The skill contains explicit instructions and semantic checks (e.g.,
CASE-NO-FABRICATE,CASE-NO-RECALL-ARTICLE) to prevent the agent from obeying instructions within materials or fabricating information when data is missing. - Capability inventory: File system access and dynamic execution via sub-processes in evaluation scripts.
- Sanitization: Uses phrase matching and regex patterns in
scripts/semantic_micro_case_gate.pyto validate outputs against expected boundaries.
Audit Metadata