← Back to Skills Marketplace
harrylabsj

Contract Risk Scan

by haidong · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ Security Clean
241
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install contract-risk-scan
Description
Scan contracts for common risk clauses and potential issues. Use when the user asks about 合同风险、合同审查、条款风险、合同问题、帮我看合同、合同检查, or wants to identify problematic cl...
README (SKILL.md)

Contract Risk Scan

Overview

This skill helps users identify common risk clauses and potential issues in contract drafts. It scans for problematic language, ambiguous terms, and high-risk provisions that may need attention.

⚠️ Important Disclaimer: This tool provides preliminary risk identification only. It does not constitute legal advice, nor does it replace professional legal counsel. Always consult a qualified attorney for important contract decisions.

When to Use This Skill

  • Reviewing a contract draft before signing
  • Identifying potentially risky clauses
  • Getting a quick overview of contract concerns
  • Preparing questions for legal consultation

Limitations

  • Only identifies common risk patterns, not all possible issues
  • Cannot assess context-specific risks
  • Does not evaluate enforceability under specific jurisdictions
  • Not a substitute for professional legal review

Workflow

  1. Receive contract text — User provides contract content or specific clauses
  2. Identify contract type — Determine if it's a service agreement, NDA, employment contract, lease, etc.
  3. Scan for risks — Check against common risk patterns (see references/common-risks.md)
  4. Report findings — Present identified risks with severity levels and explanations
  5. Suggest next steps — Recommend consulting an attorney for high-risk items

Risk Severity Levels

Level Description Action Recommended
🔴 Critical High-risk clauses that could cause significant harm Consult attorney immediately
🟡 Warning Potentially problematic clauses needing review Discuss with attorney
🟢 Advisory Minor issues or suggestions for improvement Consider revisions

Common Risk Categories

1. Liability & Indemnification

  • Unlimited liability clauses
  • One-sided indemnification
  • Missing liability caps

2. Termination

  • No termination for convenience
  • Excessive notice periods
  • Harsh termination penalties

3. Payment Terms

  • Net 60+ payment terms
  • No late payment penalties
  • Unclear payment schedules

4. Intellectual Property

  • Unclear IP ownership
  • Overly broad IP assignments
  • Missing license grants

5. Confidentiality

  • Indefinite confidentiality obligations
  • Unclear definition of confidential info
  • Missing return/destruction clauses

6. Dispute Resolution

  • Unfair venue selection
  • Missing arbitration/mediation clauses
  • One-sided attorney fee provisions

Usage

Basic Scan

"帮我扫描这份合同的风险"
"检查这个条款有没有问题"
"合同风险审查"

Specific Focus

"重点看付款条款的风险"
"检查知识产权相关条款"
"看看违约责任部分"

Output Format

For each identified risk:

  • Clause location (section/paragraph reference)
  • Risk description (what's problematic)
  • Severity level (🔴🟡🟢)
  • Suggested action (what to consider)

References

For detailed risk patterns and examples, see:

Privacy Note

Contract content is processed for risk analysis only. No contract data is stored or transmitted to third parties.

Usage Guidance
This appears to be a straightforward local contract-risk scanner: it uses regex rules to flag common problematic clauses and contains tests and an example script. Before installing, consider: (1) It is a preliminary, non-exhaustive tool and not legal advice — consult a lawyer for important contracts. (2) The scanner may produce false positives/negatives because it relies on pattern matching; review flagged context manually. (3) If you plan to run the included Node script in an environment where contract text is sensitive, ensure the runtime environment (your machine or agent) is trusted — the repository itself does not transmit or store data, but your agent or other installed tooling might. Otherwise the skill is internally coherent and proportionate to its stated purpose.
Capability Analysis
Type: OpenClaw Skill Name: contract-risk-scan Version: 1.0.1 The skill is a legitimate contract analysis tool that uses regular expressions to identify common legal risks (e.g., unlimited liability, auto-renewal) in provided text. The core logic in `scripts/contract-scanner.js` is transparent, contains no network or file-system write operations, and includes clear disclaimers regarding legal advice. No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
The name and description (contract risk scanning) match the provided code and reference data: regex-based risk patterns, scanning functions, examples, and test cases. Required environment, binaries, and config paths are empty — appropriate for a text-scanning tool.
Instruction Scope
SKILL.md restricts behavior to receiving contract text, identifying contract type, scanning against documented risk patterns, and reporting results. The runtime code performs only local regex scans and text formatting; it does not read unrelated system files or attempt network transmission. The privacy claim (no data stored/transmitted) aligns with the code (no network or persistence calls).
Install Mechanism
There is no install spec (skill is instruction/code-only). The package contains Node.js scripts and a small Python example and tests — all local files. No external downloads, package installs, or extracted archives are present.
Credentials
The skill requests no environment variables, credentials, or config paths. All processing is local and the number and type of environment requests are proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent privileges. It does not modify other skills or system-wide settings. Files included are standard scripts and tests for local use.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install contract-risk-scan
  3. After installation, invoke the skill by name or use /contract-risk-scan
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Bump version
v1.0.0
Initial release: Scan contracts for 15+ common risk patterns with severity classification
Metadata
Slug contract-risk-scan
Version 1.0.1
License MIT-0
All-time Installs 2
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Contract Risk Scan?

Scan contracts for common risk clauses and potential issues. Use when the user asks about 合同风险、合同审查、条款风险、合同问题、帮我看合同、合同检查, or wants to identify problematic cl... It is an AI Agent Skill for Claude Code / OpenClaw, with 241 downloads so far.

How do I install Contract Risk Scan?

Run "/install contract-risk-scan" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Contract Risk Scan free?

Yes, Contract Risk Scan is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Contract Risk Scan support?

Contract Risk Scan is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Contract Risk Scan?

It is built and maintained by haidong (@harrylabsj); the current version is v1.0.1.

💬 Comments