Génère en HTML CGV, mentions légales, contrats, et devis conformes au droit français pour freelances et micro-entrepreneurs.
Security Analysis
high confidenceThe skill's code and runtime instructions are consistent with its stated purpose (generating French freelance legal documents), request no credentials or remote installs, and store files under a home directory — nothing appears disproportionate or covert.
Name, intended outputs (CGV, mentions légales, contrats, devis) and the included Python script align. The skill requires no external credentials or binaries and only uses a shared local config (~/.freelance/config.json) as documented — this is appropriate for a document generator.
SKILL.md instructs running the included Python script, explains command-line options, and states where documents are stored (~/.freelance/legal/) and that it will read ~/.freelance/config.json if present. The script (as shown) reads/writes only local files and optionally opens HTML in the browser. There are no instructions to read unrelated system files or exfiltrate data.
No install spec is provided (instruction-only with a bundled Python script). That minimizes install risk; the script claims to use only the Python standard library, which matches the visible imports (argparse, json, os, webbrowser, datetime, pathlib).
The skill requests no environment variables, no external credentials, and only references a local config file (~/.freelance/config.json) documented in SKILL.md. That local config is reasonable for prefilling provider data; there are no disproportionate secret requests.
always is false, the skill is user-invocable, and it does not request persistent elevated privileges or modify other skills. It writes its own data under the user's home directory (~/.freelance/legal/), which is expected behavior for a document generator.
Guidance
This skill appears coherent and limited to local document generation. Before installing, consider: (1) review ~/.freelance/config.json contents — it may contain personal data (name, SIRET, email) you may not want written unencrypted; (2) generated files are stored under ~/.freelance/legal/ — verify file permissions if you share the machine; (3) the script may open generated HTML in your default browser unless you use --no-open; (4) the tool is not legal advice — have an attorney review any contract templates before use; (5) if you want maximum assurance, scan the entire scripts/legal.py file for any network calls or subprocess usage (the visible code uses only stdlib and webbrowser). If you are comfortable with local file writes and prefilling from your freelance config, the skill is reasonable to install.
Latest Release
v1.0.0
Generate CGV, legal notices, contracts, quotes. French law compliant HTML output.
More by @HugoSbl
Published by @HugoSbl on ClawHub
