portfolio-status
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from a local YAML log file to generate status reports, creating a surface for indirect prompt injection if the log content is compromised.
- Ingestion points: The skill reads case data from
~/.claude/plugins/config/claude-for-legal-zh/litigation-legal/matters/_log.yaml. - Boundary markers: No specific delimiters or instructions are provided to the agent to ignore potentially malicious content embedded within the case fields.
- Capability inventory: The skill is limited to reading local files. It does not have access to network operations, shell execution, or file-writing capabilities.
- Sanitization: There is no evidence of filtering or sanitization of the values extracted from the YAML file before they are included in the generated output.
Audit Metadata