family-financial-planner
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill captures detailed sensitive user information, including family demographics, financial assets (cash, investments, property), and annual income/expenses. This data is processed by official MCP services hosted on dashscope.aliyuncs.com. Since these services belong to the skill vendor (aliyun), this reflects intended functionality for financial analysis.- [EXTERNAL_DOWNLOADS]: The skill connects to financial data providers (Qieman and Hangseng Juyuan) via the official Alibaba Cloud DashScope platform to perform calculations and market research.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted user data. Ingestion points: User-provided family and financial data collected in Stages 1 and 3 of SKILL.md. Boundary markers: None identified. Capability inventory: MCP tool calls for financial analysis and report rendering (Analyze*, Get*, Render*) listed in SKILL.md. Sanitization: None identified. This surface is inherent to the skill's interactive nature and no malicious patterns were found.- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were identified. The instructions adhere to a professional role-play framework without attempting to bypass safety constraints.
Audit Metadata