legal-compliance-contract-reviewer
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, hidden commands, or hardcoded secrets were detected in the skill instructions.
- [NO_CODE]: The skill is composed entirely of Markdown documentation and text-based prompts for the AI agent; it does not include any scripts, binaries, or configuration for code execution.
- [PROMPT_INJECTION]: The skill's primary function involves processing external, potentially untrusted contract data, which presents an indirect prompt injection surface. 1. Ingestion points: Contract text provided by the user for review in SKILL.md. 2. Boundary markers: No specific delimiters or instructions are provided to the agent to ignore instructions embedded within the contract text. 3. Capability inventory: The skill's capabilities are restricted to text-based analysis and reporting; it cannot access the network, modify files, or execute system commands. 4. Sanitization: No input validation or filtering of the contract content is specified.
Audit Metadata