portfolio-monitoring

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • Analysis of External Data: The skill is designed to ingest and process external financial packages (Excel, PDF, CSV). While processing external documents is a core feature, it introduces a surface for indirect prompt injection where instructions could theoretically be hidden in the data. However, the skill lacks any specified tools for network operations or system-level access, significantly mitigating potential concerns.
  • Sensitive Information Handling: The workflow involves processing highly sensitive financial metrics such as EBITDA, debt levels, and covenant compliance. Users should ensure that the agent environment is appropriate for handling such confidential corporate data.
  • Capability Inventory: Review of the skill's instructions confirms no use of subprocesses, network calls, or file-writing capabilities. The scope is limited to data interpretation and summary generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:02 PM
Security Audit — agent-trust-hub — portfolio-monitoring