material-contract-schedule
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted external data.
- Ingestion points: The skill ingests 'Equity Purchase Agreement' drafts and 'due diligence findings' as primary inputs (SKILL.md).
- Boundary markers: There are no explicit instructions for the agent to use XML tags, delimiters, or 'ignore embedded instructions' warnings when processing these external documents.
- Capability inventory: The skill has the capability to read local files within the plugin's workspace (
matter.md,CLAUDE.md) and invoke external search tools ([yuandian栀索]). - Sanitization: There is no mention of sanitization, validation, or filtering of the content extracted from the external legal documents before it is used to influence the workflow.
Audit Metadata