install-legal-data-hunter
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
legal-data-hunterpackage from the npm registry usingnpxand references a remote MCP endpoint athttps://legaldatahunter.com/mcp. These downloads are expected for the purpose of installing the requested legal search service. - [COMMAND_EXECUTION]: The skill utilizes shell commands to detect the user's environment and install the MCP server. This includes checking for the presence of the Claude CLI and executing installation commands like
claude mcp addornpx legal-data-hunter. These are standard procedures for MCP server installation. - [PROMPT_INJECTION]: The skill provides tools to ingest and process external legal data through functions like
searchandget_document. While this creates an attack surface for indirect prompt injection from external content, the skill itself does not contain any malicious instructions or override patterns.
Audit Metadata