Open Agreements

Fill standard legal agreement templates (NDAs, cloud service agreements, SAFEs) and produce signable DOCX files. Supports Common Paper, Bonterms, and Y Combi...

This skill appears to do what it says, but consider privacy and operational steps before using it: (1) Prefer the local CLI (npm/npx) if you will fill agreements containing sensitive data — the remote MCP option will send your template data to openagreements.org. (2) Verify the npm package (version 0.7.4) and confirm there are no unexpected install hooks before installing globally. (3) Be mindful that temp values are written to /tmp/oa-values.json — ensure the agent cleans it up and avoid placing secrets in template fields. (4) When sending for signature, you'll follow an OAuth flow with DocuSign (opens in browser) — do not provide DocuSign API keys to the agent. (5) If you require stronger assurance, review the open-source repo and confirm the hosted MCP's privacy policy before sending confidential agreements.

Type: OpenClaw Skill Name: open-agreements Version: 0.2.3 The 'open-agreements' skill facilitates legal document generation and DocuSign integration through either a remote MCP (openagreements.org) or a local CLI tool. The SKILL.md documentation is transparent about data privacy, explicitly warning the agent about data transfer in the remote path and providing security-conscious instructions such as pinning npm package versions (e.g., @0.7.4) and using OAuth instead of requesting raw API keys. No evidence of malicious intent, unauthorized data exfiltration, or deceptive prompt injection was found.