legal-compliance-checker
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted content including contracts and business records.
- Ingestion points: The
ContractReviewSystem.review_contractmethod and the general compliance assessment workflow accept externalcontract_textand business data. - Boundary markers: The instructions do not define delimiters or provide specific warnings to the agent to ignore instructions embedded within the processed data.
- Capability inventory: The skill is primarily focused on text analysis and report generation; there are no active command execution, file system modification, or network capabilities exposed to the processed data in the provided snippets.
- Sanitization: The skill lacks explicit sanitization or filtering logic for the data it processes.
Audit Metadata