contract-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and reference files shows no evidence of malicious intent or dangerous capabilities. The skill lacks network access, file-writing tools, and command execution features, ensuring its operations are contained and safe.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection.\n
- Ingestion point: The agent ingests user-provided contract text as its primary input as described in SKILL.md.\n
- Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the contract text.\n
- Capability inventory: The skill across all provided files has no capabilities for network operations, file writing, or command execution.\n
- Sanitization: No sanitization of the external content is performed. Given the lack of side-effect tools, the risk is minimal and limited to the generated analysis report.
Audit Metadata