kelly-legal-matter-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external legal facts and evidence inventories to generate strategy recommendations and pleading outlines.\n
- Ingestion points: The
scripts/create_strategy_batch.mjsscript reads untrusted JSON payloads containing matter details and facts.\n - Boundary markers: The
SKILL.mdfile defines a strict human-in-the-loop boundary, requiring explicit approval for all legal work products before they are exported or used.\n - Capability inventory: The skill has the capability to write to the local file system (
scripts/export_strategy_pack.mjs) and access the network via thebusabase-sdkto communicate with Busabase bases.\n - Sanitization: Employs deterministic QA checks to identify evidence gaps and unsupported legal positions, mitigating the risk of incorrect agent-generated strategy.\n- [COMMAND_EXECUTION]: The skill instructs the user to execute several local Node.js scripts for management tasks, including
scripts/create_strategy_batch.mjs,scripts/execute_decisions.mjs, andscripts/export_strategy_pack.mjs.\n- [EXTERNAL_DOWNLOADS]: The skill depends on external packages such asbusabase-sdk,hono, and@hono/node-serverdownloaded from the official npm registry.\n- [DYNAMIC_EXECUTION]: The skill utilizes dynamic imports to load local configuration files and provider modules at runtime in files likescripts/sync-content.mjsandapp/js/providers/index.js.
Audit Metadata