month-end-prep
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes external, user-supplied, and third-party financial records (such as transaction notes, customer names, and memos), which could present a risk of indirect prompt injection if an external transaction entity contains unexpected or adversarial text.
- Ingestion points: Transaction registers, payment processor logs, and receipt filenames are imported into the workflow as described in
SKILL.md,reference/quickbooks-reconcile.md, andreference/paypal-settlements.md. - Boundary markers: Specific delimiters or structural boundaries around untrusted string fields (e.g., transaction memos) are absent from the text parsing instructions.
- Capability inventory: The skill triggers file-generation capabilities to output Excel workbooks and PDF reports directly to the user's local filesystem (
SKILL.mdStep 8). - Sanitization: Input validation or sanitization routines for raw text values before they are integrated into the final narratives or spreadsheets are not explicitly defined.
Audit Metadata