3-statement-model
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Data Ingestion Surface: The skill is designed to process external financial templates and data extracted from SEC filings. Ingesting untrusted content can represent a potential vector for indirect prompt injection.
- Ingestion points: The skill reads data from user-provided Excel templates and public company information from the SEC EDGAR system.
- Boundary markers: The instructions do not currently specify the use of clear delimiters or instructions to ignore potential commands embedded within the financial data.
- Capability inventory: The skill possesses the ability to modify file contents using the openpyxl library and automate Excel operations via Office JS.
- Sanitization: There are no explicit steps defined in the instructions to sanitize or validate the content of the ingested financial data for potential instruction patterns.
Audit Metadata