Security audit
Contract Review
Security checks for vulnerabilities and agentic risk
Overview
This skill is a plain contract-review prompt that asks the agent to summarize user-provided agreements and include legal-advice disclaimers, with no hidden execution or persistence.
Use this skill only with contract text you are comfortable sharing with your agent/provider, because legal and business agreements can contain confidential information. Treat the output as a review aid, not legal advice, and consult a qualified lawyer before signing important agreements.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.