invoice
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes various workspace files and user input, which presents a surface for indirect prompt injection findings.
- Ingestion points: Reads data from INVOICES.csv, PROJECT.md, TASKS.csv, and TIME.csv, and uses AskUserQuestion for dynamic facts.
- Boundary markers: Uses logical validation (arithmetic reconciliation) but lacks technical data/instruction delimiters.
- Capability inventory: Permitted to use Bash, Write, and Edit tools, which allows for file modification and command execution.
- Sanitization: Implements a mandatory 'native mutation sequence' to verify file state before and after changes.
- [COMMAND_EXECUTION]: The skill is configured to use the Bash tool and process.run for task-specific code execution.
Audit Metadata