Lawsuit

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only legal skill describes autonomous discovery and court filing without clear user approval, legal review, or data-handling limits.

Treat this as a review-needed legal automation skill. Use it, if at all, only for brainstorming, drafting, or organizing information; do not allow it to file documents, contact courts or parties, choose legal forums, or ingest broad discovery materials without explicit user approval and qualified legal review.

Static analysis

Static analysis findings are pending for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
High
What this means

If an agent with external tools follows this skill, it could attempt to submit legal filings or take procedural steps with real legal consequences before the user has clearly approved them.

Why it was flagged

Automated court filing is a high-impact legal action, but the skill does not specify user approval, attorney review, filing previews, jurisdiction limits, or scoped API permissions.

Skill content
3. **Execution**: Automated filing via API-integrated court dockets.
Recommendation

Restrict the skill to drafting and analysis unless the user gives explicit per-filing approval; require human legal review, document previews, court/account scoping, and clear rollback or correction procedures.

#
ASI06: Memory and Context Poisoning
Medium
What this means

Large volumes of confidential, privileged, personal, or business-sensitive legal material could be pulled into agent context or persistent records without clear limits.

Why it was flagged

The skill contemplates bulk ingestion of legal discovery materials, but does not define allowed sources, user consent, retention, redaction, privilege handling, storage location, or reuse across tasks.

Skill content
"discovery_v2":  "Recursive ingestion of millions of artifacts with ZK-proof evidence hashing"
Recommendation

Limit ingestion to user-selected files or repositories, document storage and retention behavior, protect privileged material, and require confirmation before indexing or reusing discovery data.