study-plan

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • Local File System Interaction: The skill reads from and writes to specific configuration files located in ~/.claude/plugins/config/claude-for-legal/law-student/. This is used to maintain the user's practice profile and study history across sessions. This interaction is restricted to a dedicated plugin directory and is necessary for the skill's primary function of providing a persistent study plan.- State Management via Structured Data: The skill uses a YAML file (study-plan.yaml) to store study phases, subject priorities, and session history. The instructions describe how to parse and update these fields based on user performance. There is no indication that the content of these files is used for dynamic code execution or command injection.- Step-by-Step Input Validation: The workflow includes specific instructions to ask for and wait for individual user inputs (e.g., exam dates, hours available, life context). This interactive approach ensures that data is collected intentionally and allows the agent to perform 'sanity checks' on the feasibility of the plan before committing it to storage.- Integration with Related Skills: The skill is designed to work in conjunction with other tools (e.g., flashcards, bar-prep-questions) by sharing a common session history. This modular design uses local files as a secure communication channel between the different components of the law-student plugin suite.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:26 PM
Security Audit — agent-trust-hub — study-plan