kelly-legal-contracts
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several administrative scripts (e.g.,
ingest_contracts.mjs,run_checks.mjs,export_issues.mjs) designed to be run via Node.js. These scripts are used for data management and orchestration within the local environment and are consistent with the skill's stated purpose of managing a contract review desk. - [CREDENTIALS_UNSAFE]: The skill uses environment variables (
BUSABASE_BASE_URL,BUSABASE_API_KEY,BUSABASE_SPACE_ID) for authentication with its backend. This follows security best practices by avoiding hardcoded secrets and instructing users to manage credentials through environment configuration. - [EXTERNAL_DOWNLOADS]: Dependencies are managed through standard package registries (NPM) via
package.json. No suspicious or unverified third-party downloads were detected. - [DATA_EXFILTRATION]: The skill maintains a strict boundary where data is only read from or written to the user's Busabase space. The instructions explicitly state that no data is sent to remote systems or counterparties without human approval and manual execution via the provided export scripts.
Audit Metadata