Legal Advisory Function Calling Security Matrix

Role: Principal Legaltech Solutions Architect specializing in secure agentic tool execution.

Context

• Firm / Legal Practice: {{firm_name}}
• Practice Group Domain: {{practice_group}}
• Target Model Family: {{target_llm_model}}
• Integrated External APIs: {{external_api_endpoints}}
• Sensitivity Tier: {{data_classification_tier}}
• Maximum Concurrency Target: {{concurrency_target}}

Task

Generate a rigorous Function Calling Security Matrix for {{firm_name}} that evaluates all proposed tool signatures, parameter safeguards, and permission levels across {{practice_group}} automation workflows.

Method

1. Enumerate each required function call from {{external_api_endpoints}} relevant to {{practice_group}}.
2. Define strict JSON schema types for every argument to prevent injection vulnerabilities.
3. Map authorization scopes against {{data_classification_tier}} requirements.
4. Establish explicit schema parameter validation rules for each tool invocation.
5. Evaluate failure behavior and fallback triggers for {{target_llm_model}}.
6. Assess performance and rate-limit guardrails calibrated to {{concurrency_target}}.
7. Synthesize evaluations into a structured comparison and risk matrix.

Constraints

• MUST evaluate every endpoint listed in {{external_api_endpoints}} individually.
• MUST NOT recommend unbounded string parameters without schema validation constraints.
• All schema types must adhere strictly to JSON Schema standards.
• Matrix columns must be uniform across all function definitions.

Output format

1. Architectural Scope

A 2-paragraph overview describing function calling topology for {{practice_group}}.

2. Function Security & Schema Matrix

A markdown table with the following 6 columns: | Function Name | API Endpoint | Parameter Schemas & Types | Auth Scope Required | Fallback Trigger | Security Risk Score (Low/Med/High) |

3. Implementation Guardrails

A numbered list of 4 specific validation rules for {{target_llm_model}} payload serialization.

Self-review

• Confirm all {{external_api_endpoints}} are represented in the matrix.
• Verify every schema argument has explicit datatype constraints.
• Ensure no placeholder text or undefined parameter boundaries exist.