invoice-chase
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes information from external platforms such as QuickBooks, PayPal, and Stripe. This data could potentially contain malicious content designed to influence the agent's behavior. \n
- Ingestion points: QuickBooks AR aging, PayPal settlements, and Stripe overdue invoices (SKILL.md). \n
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded content within the external data. \n
- Capability inventory: The skill can draft emails and send them through PayPal or local mail clients (SKILL.md). \n
- Sanitization: There are no explicit requirements for sanitizing or filtering the ingested financial data. \n- Sensitive Financial Data Access: The skill interacts with financial APIs to retrieve accounts receivable reports and transaction histories. While essential for its task, this involves the processing of sensitive business data.
Audit Metadata