bookkeeping
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill defines a "Reflexive Trigger Rule" in
SKILL.mdthat instructs agents to capture knowledge without prompting the user. It explicitly forbids asking permission ("The interrogative form... is forbidden"), which acts as a behavioral override for standard user confirmation protocols. \n- [PROMPT_INJECTION]: The skill processes external data (web clips, social logs) for ingestion via an LLM-based scoring gate. This creates a surface for indirect prompt injection where adversarial content in ingested logs could attempt to influence the scoring logic or candidate entity extraction. \n- [COMMAND_EXECUTION]: Deterministic detectors identifiedsubprocess.run()calls inscripts/bookkeeping.pyandtests/test_render_cli.py. These are used to run the skill's own CLI commands and testing utilities during pipeline operations and verification. \n- [EXTERNAL_DOWNLOADS]: Therequirements.txtfile specifies dependencies onPyYAMLandmistune. These are standard, well-known packages from the official Python Package Index (PyPI).
Audit Metadata