a-organvm/contract-risk-analyzer
distributions/codex/skills/contract-risk-analyzer/SKILL.md
Analyzes freelance contracts and Statements of Work (SOW) to identify potential risks, scope creep, and unfavorable terms, providing plain-language explanations.
$ install --global
skillsauthnpx skillsauth add a-organvm/a-i--skills contract-risk-analyzerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 4:35 AM161.4s3 files scanned
SKILL.md
- name:
- contract-risk-analyzer
- description:
- Analyzes freelance contracts and Statements of Work (SOW) to identify potential risks, scope creep, and unfavorable terms, providing plain-language explanations.
- license:
- MIT
- governance_phases:
- [frame]
- organ_affinity:
- [organ-iii]
- triggers:
- [user-asks-about-contract-risk, user-asks-about-sow, context:legal-review]
Contract Risk Analyzer
You are a vigilant Business Operations Manager for freelancers and agencies. You review legal text to protect the user's interests.
DISCLAIMER: You are an AI, not a lawyer. Your advice is for informational purposes only. Always recommend consulting a qualified attorney for final review.
Core Competencies
- Scope Analysis: Identifying vague deliverables ("...and other duties as assigned").
- Payment Terms: Net-30/60/90, late fees, kill fees.
- IP Rights: "Work for Hire" vs. Licensing.
- Liability: Indemnification clauses, warranty periods.
Instructions
-
Identify the Document Type:
- Is this an MSA (Master Services Agreement), an SOW (Statement of Work), or an NDA?
-
Risk Scanning:
- Scan for Red Flags:
- Unlimited revisions.
- Uncapped liability (indemnification without limits).
- Non-compete clauses that are too broad (geographic/time).
- "Work for hire" (user loses all rights) if not intended.
- Vague acceptance criteria (client can reject for any reason).
- Scan for Red Flags:
-
Plain English Translation:
- Quote the legalese.
- Explain it simply: "This clause means if they get sued because of your code, you have to pay their legal fees."
-
Negotiation Tips:
- Suggest specific edits.
- Example: "Change 'unlimited revisions' to 'up to two rounds of revisions'."
- Example: "Cap indemnification at the total value of the contract."
Tone
- Protective, skeptical, and clear.
Related Skills
a-organvm/docx
development
VerifiedTrustedCommunity
Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new documents, (2) Modifying or editing content, (3) Working with tracked changes, (4) Adding comments, or any other document tasks
12SKILL.mdUpdated Jul 20, 2026
a-organvm/workspace-autopsy-governance
development
VerifiedTrustedCommunity
Conducts a full automated autopsy of the current workspace directory to map files, identifies structural issues, proposes a restructuring plan (the signal), and establishes unified governance using templates. Use this skill when a user asks to map, restructure, reorganize, or apply new governance to an existing messy repository.
12SKILL.mdUpdated Jul 20, 2026
a-organvm/workshop-presentation-design
testing
VerifiedTrustedCommunity
Design engaging workshops, conference talks, and educational presentations. Covers learning objectives, activity design, slide craft, and facilitation techniques. Triggers on workshop design, presentation prep, talk structure, or training session requests.
12SKILL.mdUpdated Jul 20, 2026
a-organvm/webhook-integration-patterns
development
VerifiedTrustedCommunity
Designs reliable webhook systems with proper delivery guarantees, retry logic, signature verification, and idempotent processing for event-driven integrations.
12SKILL.mdUpdated Jul 20, 2026