UmowaGenerator
PassAudited by VirusTotal on May 3, 2026.
Overview
Type: OpenClaw Skill Name: umowa-generator Version: 1.0.0 The UmowaGenerator skill is a straightforward utility for generating Polish legal contract templates (e.g., employment, rental, and sales agreements). The Python code (umowa_generator.py) consists entirely of basic string manipulation and template filling without any network access, file system modifications, or execution of external commands. No evidence of data exfiltration, prompt injection, or malicious intent was found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may place national identifiers and addresses into the agent conversation or generated documents.
The skill expects sensitive identity and address details to draft contracts; this is purpose-aligned but important for users to notice.
Dane stron: imię, nazwisko, adres, PESEL/NIP
Use placeholders while drafting when possible, and provide real PESEL/NIP or address data only when needed for the final document.
If used, contracts containing personal or business details could be sent to another party by email.
The advertised PRO email feature would transmit generated legal documents outside the local drafting flow, but the artifacts do not define the email provider, controls, or recipient-confirmation process.
Wysyłanie mailem — wyślij umowę bezpośrednio z aplikacji (PRO)
Before using any email-sending feature, confirm the recipient, provider, consent, and whether the document contains sensitive identifiers.
A user might treat the generated contract as legally sufficient for an important transaction without independent review.
The wording may encourage reliance on generated legal documents without professional review; this is not malicious, but it is a trust-sensitive claim.
Tworzy czytelne, zgodne z Kodeksem Cywilnym umowy ... profesjonalne umowy prawne bez prawnika
Treat generated contracts as templates and consult a qualified lawyer or trusted advisor for high-value or unusual agreements.
Users have less external context for verifying the author, updates, or support path.
The artifacts do not provide an external source repository or homepage for independent provenance checks.
Source: unknown; Homepage: none
Install only if you trust the registry listing and reviewed artifacts; be cautious with any later PRO code, payment link, or update not included in this review.