legal-writer
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates with official and well-known legal research APIs, including CourtListener, the Electronic Code of Federal Regulations (eCFR), and the Federal Register. These interactions are documented and are necessary for the skill's primary function.
- [COMMAND_EXECUTION]: Local Python scripts included with the skill are used to verify document integrity and fetch legal citations. These scripts perform transparent text processing and API communication without evidence of malicious behavior or command injection.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
docx2pdfpackage from standard public repositories to enable PDF generation functionality. This is a routine task involving a common library. - [CREDENTIALS_UNSAFE]: Authentication for the CourtListener API is managed through an environment variable (
COURTLISTENER_API_TOKEN), which adheres to standard security practices. No hardcoded secrets or attempts to access unauthorized local configuration files were detected.
Audit Metadata