One missed deadline ends a career. caseclaw makes sure it never happens. Point it at a matter and it auto-calculates every filing deadline from 600+ court rule sets. Throw a new client name at it and it checks conflicts against your entire case history in under a second. Start typing and it's already timing your work in six-minute increments. No browser tabs. No clunky SaaS dashboards. No $500/seat enterprise contracts. Just one command and the peace of mind that nothing is slipping through.

• Outcome: Pass
• Latest audit: May 27, 2026 at 10:53 PM UTC
• Version:
  1.0.0

Overview

caseclaw is a coherent legal workflow CLI, but users should review its handling of confidential legal data and external integrations before use.

Before installing, verify the Homebrew formula and vendor, test with non-confidential data, confirm exactly what Pro/Firm and alert integrations transmit, and independently verify deadlines, conflicts, and filing requirements.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill advertises authenticated features, email/Slack alerts, calendar sync, and Pro/Firm API-backed processing involving highly sensitive legal-client matter data, but the user-facing workflow does not foreground when data leaves the machine, what specific fields are transmitted, or which commands trigger remote services. In a legal context, this can cause inadvertent disclosure of privileged or confidential information to third parties or external integrations without informed user consent.

VirusTotal

66/66 vendors flagged this skill as clean.