Agent Contract Lifecycle Management
v1.3.1Agent Contract Lifecycle Management. Build automated contract lifecycle management for AI agents: machine-readable SLAs, escrow-backed execution, real-time o...
⭐ 0· 100·0 current·0 all-time
by@mirni
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (agent contract lifecycle, SLAs, escrow, enforcement) matches the SKILL.md content: a large educational guide with Python examples that target the GreenHelix A2A Commerce Gateway sandbox. No unrelated binaries, installs, or extraneous credentials are requested.
Instruction Scope
SKILL.md is instruction-only and repeatedly states examples run against the GreenHelix sandbox (no API key needed). The guide includes code examples and workflows that call an external commerce/escrow API and describe fully automated enforcement. The manifest does not show instructions to read local files or hidden env vars, but the file is large and code examples should be reviewed before allowing an agent to act autonomously or to execute those examples.
Install Mechanism
No install spec and no code files — this is instruction-only, which minimizes disk-write/run risk. There are no downloads, package installs, or external installers declared.
Credentials
The skill declares no required environment variables or credentials, which is coherent with its claim to use a sandbox that needs no API key. However, many of the guide's production patterns (escrow, automated clawbacks, payment flows) would normally require sensitive credentials and financial integrations; users should not supply production secrets to this skill without additional review and safeguards.
Persistence & Privilege
always:false and disable-model-invocation:false (normal defaults). Although the skill does not request persistent privileges, it provides instructions for fully automated enforcement and escrow actions — if the agent is allowed to invoke skills autonomously and is given production credentials, the blast radius could be high. Consider gating autonomous execution and requiring human approval for any real-money operations.
Assessment
This is an educational, instruction-only guide that uses the GreenHelix sandbox and does not request credentials or install software — that aligns with its stated purpose. Before you allow an agent to use this skill in production: (1) read the full SKILL.md code examples to confirm they do what you expect; (2) do NOT provide production payment/escrow credentials to the skill or to an agent running it without strict approvals; (3) require human-in-the-loop approvals for any automated penalty/escrow actions; (4) verify the external GreenHelix endpoints and their legal/compliance implications for handling financial or contract enforcement workflows.Like a lobster shell, security has layers — review code before you run it.
ai-agentvk97325djxgm0zjcppbbt848kqd84w35kclmvk97325djxgm0zjcppbbt848kqd84w35kcontractsvk97325djxgm0zjcppbbt848kqd84w35kenforcementvk97325djxgm0zjcppbbt848kqd84w35kescrowvk97325djxgm0zjcppbbt848kqd84w35kgreenhelixvk97325djxgm0zjcppbbt848kqd84w35kguidevk97325djxgm0zjcppbbt848kqd84w35klatestvk97325djxgm0zjcppbbt848kqd84w35klifecyclevk97325djxgm0zjcppbbt848kqd84w35kobligationsvk97325djxgm0zjcppbbt848kqd84w35kopenclawvk97325djxgm0zjcppbbt848kqd84w35kslavk97325djxgm0zjcppbbt848kqd84w35k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.