contract-and-proposal-writer
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for using standard, well-known system tools like
pandocand official package managers (brew,apt) to handle document conversion. This is consistent with its primary purpose of generating professional business documents. - [PROMPT_INJECTION]: The skill processes user-supplied data (such as party names, scope of work, and rates) to populate document templates. This represents a surface for indirect prompt injection; however, no malicious exploitation patterns were detected, and this functionality is central to the skill's intended use-case.
- [DATA_EXFILTRATION]: No patterns of data exfiltration or unauthorized network access were found. The skill operates locally on user-provided input and provided templates.
Audit Metadata