gaps
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its reliance on external data processing.
- Ingestion points: Data is ingested from the file
~/.claude/plugins/config/claude-for-legal/regulatory-legal/gap-tracker.yamlas specified in SKILL.md. - Boundary markers: There are no explicit markers or instructions to isolate the data content from the agent's logic.
- Capability inventory: The skill performs file read and write operations based on the file content.
- Sanitization: No validation or sanitization of the YAML input is mentioned.
Audit Metadata