kelly-legal-casebase-ingest
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several utility scripts (
ingest_documents.mjs,execute_decisions.mjs,export_case_records.mjs) designed to be executed by the agent to manage the lifecycle of legal case records. These scripts are restricted to local file operations and interactions with the configured Busabase instance. - [EXTERNAL_DOWNLOADS]: The project depends on standard Node.js packages such as
busabase-sdk,hono, andesbuild-wasm, which are fetched from the official npm registry during installation. - [DATA_EXFILTRATION]: The skill communicates with Busabase (e.g.,
busabase.com) to store and retrieve case data. This communication is the intended core functionality and uses standard OAuth and API key authentication methods. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external legal documents. This potential attack surface is mitigated by a mandatory human review queue where all extracted facts, holdings, and tags must be approved or revised before being finalized. Additionally, the skill implements deterministic QA checks for PII leakage and metadata completeness.
Audit Metadata