Icelandic Contract Review
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and provides legal domain knowledge and review methodology without any technical attack vectors.
- [PROMPT_INJECTION]: No malicious instructions or attempts to bypass agent safety guidelines were detected. Use of terms like 'CRITICAL' and 'HIGH' is restricted to the context of legal risk assessment for the user's contracts.
- [REMOTE_CODE_EXECUTION]: The skill does not install any packages or download external scripts for execution.
- [DATA_EXFILTRATION]: No network tools (e.g., curl, wget) or sensitive file access patterns are present.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external text (contracts), which is a potential ingestion surface for indirect prompt injection. However, since the skill does not possess high-risk capabilities like file system writing or network communication, the potential impact is limited to the AI providing incorrect legal analysis, which is addressed by the included legal disclaimer.
Audit Metadata