retirement-syncing
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to access and parse sensitive personal financial information stored in local CSV files.
- Evidence: Accesses file paths
notebooks/retirement-accounts/OfxDownload.csv,notebooks/retirement-accounts/OfxDownload (1).csv, andnotebooks/retirement-accounts/Portfolio_Positions_*.csv. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external CSV exports which could contain malicious instructions or malformed data designed to influence the agent's behavior.
- Ingestion points: Reads and parses
OfxDownload.csvandPortfolio_Positions_*.csvfiles in thenotebooks/retirement-accounts/directory. - Boundary markers: Absent. The logic does not use delimiters or provide instructions to the agent to ignore embedded commands within the CSV fields.
- Capability inventory: Performs local file reads via
read_csvand appears to have file-writing capabilities as implied by the 'Critical Rules' regarding row mapping and column updates (Rows 46-62). - Sanitization: Absent. The skill extracts 'Symbol', 'Investment Name', and 'Quantity' fields and converts them directly to floats or includes them in reports without validation or escaping.
Audit Metadata