contract-writer
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted call history and proposal data to generate contract terms. Ingestion points: Data is fetched via the P.history method in contract.py. Boundary markers: The agent is explicitly instructed to show the draft to the user and obtain manual approval before proceeding. Capability inventory: The skill has the ability to write files to the local file system and execute local shell commands. Sanitization: Content is escaped using htmllib.escape in the contract generation logic.
- [COMMAND_EXECUTION]: The skill executes a local web browser to convert HTML agreement files into PDF format. Evidence: contract.py uses subprocess.run to call browser executables found on the host system. Context: This is a functional requirement for PDF generation and utilizes local file paths.
- [DYNAMIC_EXECUTION]: The skill dynamically loads a local helper module from a relative path to share logic across tools. Evidence: contract.py uses importlib.util to load and execute the sibling deals.py script. Context: This facilitates code reuse within the author's local skill environment.
Audit Metadata