personal-finance
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted user input (financial details and goals) to generate structured financial plans in markdown format.
- Ingestion points: User inputs parsed in
SKILL.mdand detailed responses to questionnaires intemplates/prompt-main.md. - Boundary markers: The instructions lack explicit delimiters or instructions for the agent to treat user-supplied text as data rather than instructions.
- Capability inventory: The skill uses file-writing capabilities to generate reports (e.g.,
finance-<topic>-YYYY-MM-DD.md). - Sanitization: There are no defined mechanisms to sanitize or validate user input before it is interpolated into the final output reports.
Audit Metadata