revenue-recognition
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for computing financial metrics like deferred and recognized revenue. All external links point to official Stripe documentation (docs.stripe.com), which is a well-known and trusted service. No data exfiltration, hardcoded credentials, or unauthorized command execution patterns were found.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from the Stripe API (e.g., subscription intervals, amounts, and metadata). Ingestion points: Stripe active subscription lists and paid invoices (referenced in SKILL.md). Boundary markers: None explicitly defined in the output templates or instructions. Capability inventory: Read-only access to Stripe financial records via the Stripe MCP (SKILL.md). Sanitization: No specific sanitization or filtering of external data is defined in the workflow.
Audit Metadata