legal-matter-summarization
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard legal matter management workflows using authorized ServiceNow tools (MCP and REST). All operations are confined to the intended enterprise environment.- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing untrusted text from ServiceNow records. 1. Ingestion points: sn_legal_matter, sn_legal_case, sn_legal_task, and sys_attachment (Steps 1-4). 2. Boundary markers: Absent from the summary template in Step 7. 3. Capability inventory: SN-Update-Record and SN-Add-Work-Notes. 4. Sanitization: Absent. This is a low-risk finding inherent to the summarization of external data.
Audit Metadata