Agent Service Agreements

• Risk level: Low
• Analyzed: Apr 5, 2026, 1:51 AM
• Findings: 0
• Version: 0.1.1

Overview

The skill's requests and instructions are consistent with an agent-to-agent contract helper: it expects Python and pip, reads/writes local agreement files, and directs you to a PyPI package — nothing requested is disproportionate to the stated purpose.

This skill appears coherent, but before installing: (1) inspect the PyPI package (owner, releases, source) because `pip install` will run code from that package; (2) consider installing in a virtual environment or sandbox; (3) review the package source to ensure it behaves as promised (no hidden network calls, logging, or secret access); (4) store agreement files in a directory you control and avoid pointing the tool at sensitive system paths. If you need the agent to perform payments or access secrets later, verify those integrations separately — this skill records payment terms but does not execute payments.