contract-redliner
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external contracts, which are untrusted data sources. A malicious contract could include instructions intended to subvert the agent's analysis or influence its responses.
- Ingestion points: User-provided contract text used for clause-by-clause analysis (SKILL.md).
- Boundary markers: Absent. There are no instructions to use specific delimiters or to treat contract content strictly as data.
- Capability inventory: The skill itself contains no code, network operations, or file-writing capabilities.
- Sanitization: Absent. The skill does not define any methods for sanitizing or validating ingested contract text.
- [NO_CODE]: The skill consists entirely of Markdown instructions and methodology. It does not include any scripts, binaries, or configuration that would allow for command execution or remote data fetching.
Audit Metadata