legal-for-founders
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational content and process checklists for startup founders. It references authoritative industry resources (such as YC, Clerky, and CooleyGO) and incorporates appropriate legal disclaimers. The included Python script (
scripts/check-output.py) is a benign utility for validating that template placeholders have been filled correctly before finalizing a deliverable. - [INDIRECT_PROMPT_INJECTION]: The skill involves a template-based generation process for legal status reports.
- Ingestion points: User-provided company name and status details are interpolated into the
templates/output-template.mddeliverable. - Boundary markers: The template does not utilize explicit delimiters to isolate user-provided values from the instruction structure.
- Capability inventory: The skill is limited to text generation and a local Python validation script; it does not have access to network exfiltration or privileged shell commands.
- Sanitization: No specific escaping or validation is performed on the user-supplied strings prior to interpolation.
- Assessment: Due to the lack of dangerous capabilities, this surface poses no risk.
Audit Metadata