legal-ai-audit-bundle
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill automates its workflow by executing a local Node.js script (
scripts/assemble-bundle.mjs). This script performs standard administrative tasks such as directory creation, file copying, and cryptographic hashing using the built-innode:fsandnode:cryptomodules. - [EXTERNAL_DOWNLOADS]: The skill's documentation and roadmap reference external GitHub repositories from well-known sources, including Microsoft's
agent-governance-toolkit. These are informational references used for architectural inspiration; the skill does not perform any remote code downloads or execution at runtime. - [SAFE]: The skill explicitly includes security and privacy considerations, such as a warning to exclude PII (personally identifiable information) re-identification maps from audit bundles to comply with RODO (GDPR) standards. All file operations are restricted to the local environment, consistent with the
data-residency: localdeclaration.
Audit Metadata