payg-instalment-optimization

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • SAFE (SAFE): No malicious patterns or security risks detected in the provided documentation.
  • NO_CODE (SAFE): The file consists entirely of Markdown text and metadata. It references a TypeScript engine (lib/analysis/payg-instalment-engine.ts) but contains no scripts or executable logic itself.
  • Indirect Prompt Injection (SAFE): Although the skill defines an interface for data ingestion (tenantId, financialYear, options), it lacks any high-risk capabilities such as network access, file system writing, or command execution that could be exploited through malicious data.
  • Ingestion points: analyzePAYGInstalments function parameters (tenantId, financialYear, options).
  • Boundary markers: None present in the documentation.
  • Capability inventory: Purely analytical/mathematical function signature; no external tools or risky APIs mentioned.
  • Sanitization: Not applicable as the skill is documentation-focused.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:48 PM