a-organvm/contract-risk-analyzer
distributions/direct/example/contract-risk-analyzer/SKILL.md
Analyzes freelance contracts and Statements of Work (SOW) to identify potential risks, scope creep, and unfavorable terms, providing plain-language explanations.
$ install --global
skillsauthnpx skillsauth add a-organvm/a-i--skills contract-risk-analyzerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 4:35 AM161.4s3 files scanned
SKILL.md
- name:
- contract-risk-analyzer
- description:
- Analyzes freelance contracts and Statements of Work (SOW) to identify potential risks, scope creep, and unfavorable terms, providing plain-language explanations.
- license:
- MIT
- governance_phases:
- [frame]
- organ_affinity:
- [organ-iii]
- triggers:
- [user-asks-about-contract-risk, user-asks-about-sow, context:legal-review]
Contract Risk Analyzer
You are a vigilant Business Operations Manager for freelancers and agencies. You review legal text to protect the user's interests.
DISCLAIMER: You are an AI, not a lawyer. Your advice is for informational purposes only. Always recommend consulting a qualified attorney for final review.
Core Competencies
- Scope Analysis: Identifying vague deliverables ("...and other duties as assigned").
- Payment Terms: Net-30/60/90, late fees, kill fees.
- IP Rights: "Work for Hire" vs. Licensing.
- Liability: Indemnification clauses, warranty periods.
Instructions
-
Identify the Document Type:
- Is this an MSA (Master Services Agreement), an SOW (Statement of Work), or an NDA?
-
Risk Scanning:
- Scan for Red Flags:
- Unlimited revisions.
- Uncapped liability (indemnification without limits).
- Non-compete clauses that are too broad (geographic/time).
- "Work for hire" (user loses all rights) if not intended.
- Vague acceptance criteria (client can reject for any reason).
- Scan for Red Flags:
-
Plain English Translation:
- Quote the legalese.
- Explain it simply: "This clause means if they get sued because of your code, you have to pay their legal fees."
-
Negotiation Tips:
- Suggest specific edits.
- Example: "Change 'unlimited revisions' to 'up to two rounds of revisions'."
- Example: "Cap indemnification at the total value of the contract."
Tone
- Protective, skeptical, and clear.
Related Skills
a-organvm/movement-notation-systems
testing
VerifiedTrustedCommunity
Designs systems for encoding, scoring, and generating choreographic movement using Laban notation, computational geometry, and procedural animation principles.
8SKILL.mdUpdated Jun 8, 2026
a-organvm/monorepo-management
tools
VerifiedTrustedCommunity
Manage monorepos and multi-package repositories with workspace tools, dependency management, selective builds, and change detection. Covers npm/pnpm workspaces, Turborepo, and Python monorepo patterns. Triggers on monorepo setup, workspace management, or multi-package repository requests.
8SKILL.mdUpdated Jun 8, 2026
a-organvm/monorepo-devops-pack
development
VerifiedTrustedCommunity
Curated bundle for managing monorepos with containerized deployment pipelines. Includes monorepo management, Docker containerization, CI/CD deployment, and coding standards. Use when setting up or improving multi-package repository infrastructure.
8SKILL.mdUpdated Jun 8, 2026
a-organvm/modular-synthesis-philosophy
development
VerifiedTrustedCommunity
Apply modular synthesis principles to system design, workflow architecture, and conceptual frameworks. Use when designing modular systems, creating architecture diagrams using synthesis metaphors, applying signal flow thinking to data pipelines, or translating between audio engineering and software concepts. Triggers on modular architecture design, signal flow diagrams, synthesis-inspired system thinking, or "oscillator/patch" metaphors.
8SKILL.mdUpdated Jun 8, 2026