Contract Reviewer Wudi

• Risk level: Low
• Analyzed: Apr 23, 2026, 6:51 PM
• Findings: 0
• Version: 2.9.5

Overview

The skill's files, instructions, and requirements are consistent with a local contract‑review tool that reads Word/PDF inputs, runs OCR and generates Track Changes output; nothing in the provided material demands unrelated secrets or system privileges — but you should review and run the code from this unknown GitHub source with normal caution.

This skill appears coherent for contract reviewing, but you are downloading and running code from an unknown GitHub fork. Before installing: (1) inspect the Python scripts for any network calls, subprocess.exec usage, or references to external endpoints or hidden credentials; (2) run tests in an isolated/sandbox environment (container or VM); (3) verify third‑party dependencies (python-docx, OCR tools) and install them from trusted sources; (4) confirm GPL-3.0 license obligations if you distribute or modify the tool; (5) if you plan to process sensitive contracts, ensure no code transmits documents externally and consider keeping processing on an air‑gapped or enterprise‑approved environment. If you want, provide the contents of key scripts (e.g., full_pipeline.py, apply_changes.py, pdf_ocr.py) and I can point out any networking or exfiltration code patterns that would raise stronger concerns.