rules-lawyer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Magic: The Gathering Comprehensive Rules and card rulings data from Scryfall and MTGJSON. These resources are essential for the skill's primary function of rules verification.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests rules text and card data from external sources, which constitutes an indirect prompt injection surface. This risk is minimized by the skill's requirement for verbatim citations and its focus on technical game rules.\n
- Ingestion points: MTG Comprehensive Rules TXT files and MTGJSON card data files.\n
- Boundary markers: Instructions mandate quoting the exact rule text returned by the CLI tools.\n
- Capability inventory: File system access via Read tool, network access for updates, and subagent spawning for complex reasoning.\n
- Sanitization: The skill relies on structured retrieval and verbatim quoting of rules text.
Audit Metadata