Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add arunbalajiraju-proc/procurement-ai-assistant --skill contract-risk-review-skillgit clone --depth 1 https://github.com/arunbalajiraju-proc/procurement-ai-assistantWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/arunbalajiraju-proc/procurement-ai-assistant/contract-risk-review-skill)<a href="https://agentmods.dev/skills/arunbalajiraju-proc/procurement-ai-assistant/contract-risk-review-skill"><img src="https://agentmods.dev/badge/skills/arunbalajiraju-proc/procurement-ai-assistant/contract-risk-review-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/arunbalajiraju-proc/procurement-ai-assistant/contract-risk-review-skill"><img src="https://agentmods.dev/badge/skills/arunbalajiraju-proc/procurement-ai-assistant/contract-risk-review-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.01351 |
| Opus 5 | $0.00016 | $0.00675 |
| Sonnet 5 | $0.00007 | $0.00270 |
| Haiku 4.5 | $0.00003 | $0.00135 |
Grade A, and why
contract-risk-review-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 229 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill Name
Procurement Contract Risk Review Skill
Purpose
This skill helps AI perform a first-pass procurement and commercial risk review of a contract, master agreement, SOW, amendment, renewal, supplier terms, or clause set.
It identifies what a clause says, the possible business and commercial impact, questions to clarify, possible procurement positions, and issues that require legal or specialist review.
This skill does not provide final legal advice, approve contract language, or replace legal counsel.
Composability
This skill is standalone. If other Procurement AI Assistant skills are installed, the AI may combine relevant skills for a multi-step procurement request. Do not assume another skill is available; preserve this skill's own guardrails and human review points.
Core Principle
Legal wording and commercial impact are related but not identical.
The workflow is:
Extract -> Classify -> Interpret Operationally -> Assess Commercial Impact -> Prioritize -> Prepare Position -> Escalate
When to Use
Use this skill for:
- Contract and clause review
- Supplier paper review
- Master agreement or SOW review
- Renewal and amendment review
- SaaS and software agreements
- Professional and managed services contracts
- Contract negotiation preparation
- Commercial-risk summaries
- Legal escalation preparation
- Contract comparison against an approved position
Do Not Use This Skill For
Do not use it to:
- Give final legal advice
- Approve or sign a contract
- Replace counsel
- State that a clause is enforceable in a jurisdiction without qualified review
- Rewrite approved legal language as final
- Treat every deviation as equally serious
- Ignore deal value, business criticality, or risk context
Required Inputs
- Contract or clauses
- Transaction type and value
- Scope and deliverables
- Contract term and renewal structure
- Data and security context
- Business criticality
- Supplier role and dependency
- Approved template or fallback position, if available
- Known negotiation priorities
- Required output and audience
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 229 lines · 33 tokens per session scan A b055c3ee91e2
contract-risk-review-skill is a skill published in the GitHub repository arunbalajiraju-proc/procurement-ai-assistant (13 stars, last pushed 1mo ago), licensed MIT. It adds 33 tokens to every session and 1,351 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
insurance-expert
Expert-level insurance systems, underwriting, claims processing, actuarial analysis, risk assessment, and insurtech solutions. Use when the user mentions underwriting, claims, actuarial, risk, or insurtech, or when the task involves Insurance Systems, Insurance Types, Standards and Regulations, or Claims Processing.
standards-expert
Expert-level ISO standards, quality management, compliance, and certification. Use when the user mentions ISO standards, quality management, compliance, or certification, or when the task involves Compliance & Certification, Auditing, or Continuous Improvement.
banking-expert
Expert-level banking systems, core banking, regulations, and banking technology. Use when the user mentions finance, core banking, regulations, or payments, or when the task involves Banking Systems or Key Technologies.
lawyer-expert
Expert-level legal systems, contracts, compliance, and legal technology. Use when the user mentions legal, contracts, compliance, law, or legal tech, or when the task involves Legal Systems, Legal Technology, Compliance Frameworks, or Contract Management.
bidwriter
A Chinese-language assistant for preparing tender and bid documents—the formal proposals submitted in response to a procurement request. It covers construction, consulting, design, IT, software, goods, and services.
Vendor Privacy Diligence
Use when running pre-contract or renewal privacy diligence on a vendor, processor, or sub-processor — a security questionnaire has come back, a new tool is proposed, or procurement asks for a privacy read — to inventory the vendor's claimed privacy posture, map data categories and purposes against the client's…