algo-risk-credit

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes a process for ingesting and analyzing borrower-provided data to generate credit risk assessments.
  • Ingestion points: Data input involves borrower features such as income, debt-to-income (DTI) ratios, and credit history as described in SKILL.md and examples/sample_scenario.md.
  • Boundary markers: There are no specific delimiters or instructions defined to separate user-provided data from the agent's logic, which could allow maliciously crafted data to influence model outputs.
  • Capability inventory: The skill provides Python code snippets for model training and data manipulation using libraries like pandas and scikit-learn in references/reject-inference.md and references/woe-binning.md.
  • Sanitization: The provided Python implementations lack input validation or sanitization routines for the data fields they process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 02:05 PM
Security Audit — agent-trust-hub — algo-risk-credit