cash-flow-snapshot
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes financial information from external connectors (QuickBooks, PayPal, Stripe, Square) and user-uploaded CSV files. This capability could allow an attacker to embed malicious instructions within the data fields, which the agent might then interpret as instructions.\n
- Ingestion Points: Financial transaction data and CSV content are integrated into the agent's context in
SKILL.md(Step 2).\n - Capability Inventory: The skill is authorized to generate and save XLSX workbooks (
cash-flow-snapshot-[YYYY-MM-DD].xlsx) and provide chat summaries.\n - Boundary Markers: The workflow currently lacks specific delimiters or instructions for the agent to disregard any natural language instructions found within the ingested data.\n
- Sanitization: The instructions do not describe a process for sanitizing or validating the data content beyond fuzzy-matching column headers.
Audit Metadata