legal-proposal-generator
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill does not contain any malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms. Its logic is purely instructional, guiding the agent on how to structure information based on provided legal templates.
- [NO_CODE]: The skill consists entirely of Markdown files, including documentation, templates, and reference guides. No Python scripts, JavaScript files, or shell scripts are present, eliminating risks associated with arbitrary code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data such as chat transcripts, audio recordings, and legal evidence. While this creates a theoretical surface for indirect prompt injection (where instructions embedded in the data could influence the agent), the skill includes specific instructions to 'not add facts' and 'only analyze based on provided materials,' which serves as a mitigation. No dangerous tools are invoked by the skill, limiting the potential impact of such an injection.
Audit Metadata