contract-review
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external contract documents, presenting an indirect prompt injection surface.
- Ingestion points: Documents are provided by users via text or attachments for review as described in SKILL.md.
- Boundary markers: There are no instructions in SKILL.md to use delimiters or ignore embedded instructions within the ingested documents.
- Capability inventory: The skill utilizes file system access to save review summaries as specified in the Output section of SKILL.md.
- Sanitization: No sanitization or validation of the ingested document content is performed before processing.
Audit Metadata