demand-intake
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a legitimate administrative function for legal workflows and does not contain any malicious code or exfiltration patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill functions as an ingestion point for user-provided data that is subsequently stored in local files to be read by downstream legal drafting tools. This represents a multi-step data pipeline surface, which is documented as a primary intended function of the skill.
- [DATA_EXFILTRATION]: No network calls (such as curl or wget) or hardcoded credentials were detected. File system access is restricted to the plugin's own local configuration and data directories.
Audit Metadata