contract-review
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill is entirely composed of markdown instructions and YAML configuration. No executable scripts (Python, JavaScript, etc.) or binary payloads were found within the skill package, including the contents of the ZIP-compressed .skill file.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process and analyze third-party contract documents, which constitutes an ingestion point for untrusted data. While an attacker could attempt to embed malicious instructions within a contract to influence the agent's behavior, the skill lacks any capabilities (such as file system access or network tools) that could be exploited to cause harm.
- Ingestion points: External contract text, vendor paper, and legal clauses provided by the user for analysis.
- Boundary markers: The instructions do not specify any delimiters or safety markers to isolate untrusted input from the agent's system prompt.
- Capability inventory: No tools, subprocess calls, or API capabilities are defined or used by this skill.
- Sanitization: The skill does not implement text sanitization or instruction-filtering on the input data.
Audit Metadata