court-dockets
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/harvest_complaints.pyutilizessubprocess.runto execute the system utilitiespdfinfoandpdftotext. These commands are used to verify page counts and extract text content from downloaded PDF documents for further processing. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes large volumes of external data from legal vendors, which creates an attack surface for instructions potentially embedded in document titles or docket entries. 1. Ingestion points: API responses from Lex Machina and Docket Alarm processed in
scripts/harvest_complaints.pyandscripts/da_grab.py. 2. Boundary markers: No specific delimitation or 'ignore instructions' markers are used when processing external document text. 3. Capability inventory: The skill has the capability to perform network requests viarequestsand execute local system commands viasubprocess.run. 4. Sanitization: External document titles are normalized for whitespace and case inscripts/harvest_complaints.pyusing thenorm()function, but do not undergo extensive safety filtering or escaping.
Audit Metadata