Atlas / Skills / revfactory / Clause Risk Database

Clause Risk DatabaseSAFE

skills/revfactory/clause-risk-database
Verdict
SAFE
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
Apache-2.0
Stars
1,297
01

Overview

An agent skill published by revfactory.

Read from source at commit 459e1bb8f76eOBSERVED · 2026-10-12
02

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: clause-risk-database
description: "A risk clause database that systematically identifies and grades risk patterns in contract clauses. The 'risk-assessor' and 'clause-analyst' agents must use this skill's pattern DB and scoring methodology when evaluating clause-level risk in contracts. Used for clause-level risk assessment tasks such as 'risk clause analysis', 'disadvantageous clause identification', 'risk scoring', etc. Note: Overall contract orchestration or contract drafting itself is outside the scope of this skill."
---

# Clause Risk Database — Risk Clause Pattern DB and Scoring Engine

A specialized knowledge base that identifies risk patterns in contract clauses and calculates quantitative risk scores.

## Risk Clause Pattern Classification System

### Tier 1: Critical Risk (80-100 points)

| Pattern ID | Pattern Name | Description | Representative Wording |
|-----------|-------------|-------------|----------------------|
| C-01 | Unlimited Liability | Full liability without cap | "shall indemnify all damages" |
| C-02 | Unilateral Termination | Only the counterparty can terminate unconditionally | "Party A may terminate immediately without cause" |
| C-03 | Blanket Indemnification | Complete exemption of counterparty's liability | "Party A shall not be liable under any circumstances" |
| C-04 | Unlimited IP Transfer | Transfer of all IP without consideration | "All rights to deliverables shall vest in Party A" |
| C-05 | Excessive Non-Compete | Non-compete with excessive scope in duration, geography, and range | "Prohibited from working in the same industry for 2 years" |

### Tier 2: High Risk (60-79 points)

| Pattern ID | Pattern Name | Description | Representative Wording |
|-----------|-------------|-------------|----------------------|
| H-01 | Auto-Renewal Trap | Excessive notice period + automatic renewal | "Auto-renews for 1 year without 60-day prior notice" |
| H-02 | Excessive Delay Penalties | Delay penalty rate exceeding market standard | "1% of contract amount per day of delay" |
| H-03 | Infinite Acceptance Loop | No limit on acceptance review count/duration | "Revisions shall continue until Party A is satisfied" |
| H-04 | One-Sided Confidentiality | Confidentiality obligation imposed on one party only | "Party B shall not disclose the contents of this contract" |
| H-05 | Unfavorable Jurisdiction | Exclusive jurisdiction at counterparty's location | "Court at Party A's headquarters location" |

### Tier 3: Medium Risk (40-59 points)

| Pattern ID | Pattern Name | Description |
|-----------|-------------|-------------|
| M-01 | Delayed Payment | Payment terms exceeding 60 days after acceptance |
| M-02 | Unlimited Change Requests | Lack of cost adjustment provisions for scope changes |
| M-03 | Unclear Completion Criteria | Ambiguous completion/acceptance standards |
| M-04 | Excessive Warranty Period | Warranty period exceeding industry standard |
| M-05 | Unspecified Governing Law | Unclear governing law in international transactions |

### Tier 4: Low Risk (20-39 points)

| Pattern ID | Pattern Name | Description |
|-----------|-------------|-------------|
| L-01 | Insufficient Notice Provisions | Absence of written/email notification rules |
| L-02 | No Assignment Restriction | Absence of restrictions on transfer of contractual rights/obligations |
| L-03 | Missing Force Majeure | Absence of force majeure exemption clause |

## Risk Scoring Algorithm

### Individual Clause Score Calculation

```
clause_score = base_score(pattern) x position_weight x contract_size_weight x industry_weight

position_weight:
  - Party A (advantaged side): 0.5
  - Party B (disadvantaged side): 1.5
  - Neutral/Unknown: 1.0

contract_size_weight:
  - Under 100M: 0.8
  - 100M-1B: 1.0
  - 1B-10B: 1.3
  - Over 10B: 1.5

industry_weight:
  - IT/Software Development: 1.2 (IP risk)
  - Construction: 1.3 (delay penalties, warranty)
  - Finance: 1.4 (regulatory risk)
  - General Services: 1.0
```

### Overall Risk Grade

```
overall_score = sum(weighted_clause_scores) / total_clause_count

Grades:
  S Grade (Immediate Correction): Overall 80+ or 1+ Critical clauses
  A Grade (Correction Recommended): Overall 60-79
  B Grade (Caution): Overall 40-59
  C Grade (Satisfactory): Overall 20-39
  D Grade (Excellent): Overall under 20
```

## Required Checkpoints by Contract Type

### Software Development Services

| Essential Clause | Risk if Missing | Recommended Standard |
|-----------------|----------------|---------------------|
| IP Ownership | IP dispute | Joint ownership or license |
| Source Code Delivery | Vendor lock-in | Escrow or direct delivery |
| Change Management (CR) | Scope creep | CR process specified |
| Acceptance Criteria/Period | Infinite revisions | Within 2 rounds, 14-day deadline |

### Lease Agreement

| Essential Clause | Risk if Missing | Recommended Standard |
|-----------------|----------------|---------------------|
| Deposit Return Conditions | Non-return | Within 30 days after vacating |
| Restoration Scope | Excessive restoration costs | Exclude normal wear and tear |
| Early Termination Terms | Penalty disputes | 3 months prior notice |

### NDA (Non-Disclosure Agreement)

| Essential Clause | Risk if Missing | Recommended Standard |
|-----------------|----------------|---------------------|
| Confidential Information Definition | Scope dispute | Marking/labeling approach |
| Duration | Infinite obligation | 2-3 years |
| Exceptions | Excessive restrictions | Public info, independent development, court orders |

## Risk Report Output Format

```markdown
## Contract Risk Scorecard

**Contract Type**: [Type]  |  **Party Position**: [A/B]  |  **Overall Grade**: [S/A/B/C/D]

| # | Clause | Pattern | Grade | Score | Modification Recommendation |
|---|--------|---------|-------|-------|-----------------------------|
| 1 | Article X | C-01 | Critical | 95 | Liability cap required |
```

## Notes

- Based on contract law practices; common law contracts requi
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha 459e1bb8f76efull audit observations/trust-audit/skill/revfactory__clause-risk-database.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-12459e1bb8f76eSAFEB89first audit
05

Questions

Is Clause Risk Database safe to install?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.

What can Clause Risk Database access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

How current is this page?

The grade is for one exact copy of the source (459e1bb8f76e), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement