post
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes local Python scripts
post_journals.pyandroll_tb.pyto perform accounting calculations. This is consistent with the skill's stated purpose of automating the trial balance process. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it processes data from
journals.jsonto complete tasks. - Ingestion points: Data is ingested from the
journals.jsonfile mentioned in the completion criteria. - Boundary markers: No specific delimiters or safety instructions are used to isolate ingested data from the system prompt.
- Capability inventory: The skill is capable of executing local Python scripts for data processing, but lacks network or high-privilege access.
- Sanitization: No explicit data sanitization or validation logic is defined in the markdown instructions.
Audit Metadata