legal-graph

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a utility for converting legal research and case analysis into a structured JSON format. It explicitly directs the agent to prioritize structured data sources and validated citations, which reduces the risk of hallucination and data corruption.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it processes external legal texts (facts and contracts) and writes them to a project file.
  • Ingestion points: Case facts, legal summaries, and contract text provided by users or prior analysis steps in the agent context.
  • Boundary markers: No explicit delimiters or instructions are used to separate user-provided data from the agent's logic during the JSON assembly process.
  • Capability inventory: The skill requires file-writing capabilities to update the project file law-powers/data.js.
  • Sanitization: The instructions do not specify sanitization or escaping protocols for content stored in the description or label fields of the output JSON.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 08:43 PM
Security Audit — agent-trust-hub — legal-graph