bluebook
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile contains a dynamic context injection command using the!commandsyntax. The commandd=${CLAUDE_SKILL_DIR}; command -v skill-toc >/dev/null 2>&1 && exec skill-toc "$d"; s=$HOME/.claude/skills/plugin-utils/bin/skill-toc; [ -x "$s" ] && exec "$s" "$d"; ...is used to generate a table of contents at load time. It functions by checking for the presence of a local utility namedskill-tocand executing it to list the skill's reference files. This behavior is localized to documentation generation and does not involve unauthorized data access or network activity. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied queries about legal citations (Ingestion point: User interaction). Boundary markers (present/absent): Absent. Capability inventory: The skill has no code for subprocess calls, file-writes, or network operations across all reference scripts (Capability inventory: None). Sanitization (present/absent): Absent.
Audit Metadata