service-legal-docs
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted user data, such as existing legal documents, to generate new outputs. This creates a surface where malicious instructions embedded in the input could influence agent behavior.\n
- Ingestion points: User-provided 'Existing Materials' and service details (Phase 1).\n
- Boundary markers: None; the skill does not specify delimiters to separate user data from instructions.\n
- Capability inventory: File system access for directory creation and document writing in the
_workspace/directory.\n - Sanitization: No evidence of input validation or content filtering.\n- [COMMAND_EXECUTION]: The skill performs local file system operations to manage its project workspace, including creating directories and saving markdown files.
Audit Metadata