contract-analyzer
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user documents which may contain malicious instructions designed to subvert the agent's logic.
- Ingestion points: Contract text provided by users during the workflow (SKILL.md).
- Boundary markers: The skill lacks defined delimiters or instructions to ignore embedded commands within the analyzed documents.
- Capability inventory: The agent is limited to document analysis and report generation, with no access to external networks, file writing, or command shells.
- Sanitization: No sanitization or validation of document content is performed prior to analysis.
Audit Metadata