tax-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of Markdown templates and procedural guidance for tax compliance management. It does not request any tool access, perform network communications, or include scripts. All external identifiers and entities described (e.g., tax forms, jurisdictions, and the author 'aviskaar') are legitimate and consistent with the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external documents, which represents a vulnerability surface.
- Ingestion points: The skill instructions specify processing tax authority notices and customer invoices (SKILL.md).
- Boundary markers: There are no explicit instructions to the agent to disregard instructions embedded within these external documents.
- Capability inventory: The skill itself does not define or request specific tools, though the agent environment may provide default file system or terminal access.
- Sanitization: No input validation or sanitization protocols are included for the data being processed.
Audit Metadata