ambiguity-stress-test
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill mentions utilizing external legal research tools such as CourtListener, Descrybe, Midpage, and Lexis. These are well-known technology and legal services used to verify case law. The skill explicitly states it makes no network calls of its own and relies on the host environment's research tools, which is standard for specialized legal analysis agents.
- [INDIRECT_PROMPT_INJECTION]: The skill inherently processes untrusted data in the form of legal documents provided by users for analysis. While this creates a surface area for indirect prompt injection, the risk is minimized by the skill's core purpose: performing an adversarial, critical scan of the text.
- Ingestion points: User-provided legal text files (Segmented in Step 1).
- Boundary markers: None explicitly defined in the instructions for separating user text from the prompt.
- Capability inventory: Text analysis and reporting. No capabilities for subprocess execution, file writes, or unauthorized network operations are present.
- Sanitization: None detected in the instructions.
- [METADATA_POISONING]: The skill metadata correctly identifies the author and intended jurisdiction (United States). The instructions are consistent with the claimed purpose of the skill.
Audit Metadata