contract-review-anthropic
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted data (legal contracts) which represents an attack surface for indirect prompt injection.
- Ingestion points: The skill processes contract text provided by the user for analysis against playbooks (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or 'ignore embedded instructions' warnings for the contract data being processed.
- Capability inventory: The skill primarily performs text analysis and generates redline suggestions; it does not appear to have file-write, network operations, or subprocess execution capabilities.
- Sanitization: There is no mention of sanitizing or escaping the input contract text before it is processed by the agent.
Audit Metadata