vibe-legal-batch-redliner
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to clone a repository from an untrusted GitHub account (
sarturko-maker/vibe-legal-server) rather than a verified or trusted organization. - [REMOTE_CODE_EXECUTION]: The setup process involves running package managers (
pip,npm) and executing the downloaded code locally. This path allows for the execution of unverified logic in the user's environment. - [DATA_EXFILTRATION]: The core functionality extracts the entire text of legal contracts and sends it to external servers (Google Gemini). This creates a significant exposure risk for confidential and privileged legal data, although the author provides prominent warnings about this flow.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted documents (contracts) and uses their content to influence AI-generated tracked changes. Maliciously crafted clauses could potentially manipulate the AI's redlining output.
- [NO_CODE]: The skill package itself contains only Markdown documentation and lacks its own executable scripts or configuration files, delegating all processing tasks to external software that must be manually installed.
Audit Metadata