finance-metrics-quickref

Pass

Audited by ZeroLeaks on Apr 15, 2026

Risk Level: NONE
Scan Summary

The SKILL.md is clear and fully reviewable—it's a static reference document containing SaaS finance definitions, formulas, and benchmarks with no tool calls, external fetches, or execution logic. Instruction/data boundaries stay clean; the skill does not push the agent to treat user-supplied or external content as trusted instructions. Tested scenarios did not show material prompt-injection risk or skill-induced worsening of downstream behavior. Confidence is low not because of the skill's content—which looks straightforward—but because behavior analysis was not run, meaning there's no empirical confirmation that loading this skill leaves downstream agent behavior unchanged compared to a no-skill baseline.

Score
93/100
Verdict
PASS
Confidence
low
Findings
0
Section Analysis (3)
TransparencyPASS
96/100

This is a static, read-only reference skill containing SaaS finance metric definitions, formulas, and benchmarks. Its behavior is fully described in the markdown with no hidden execution paths, no tool invocations, no external fetches, and no authority escalation.

Prompt InjectionPASS
92/100

The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.

Agent BehaviorSkipped

Behavior analysis was not run.

Checks
TransparencyNo hidden execution paths or embedded secrets
Prompt injectionData and instructions kept separate
Agent behaviorNo harmful downstream agent effects detected
Coverage DetailsClick to expand
Discovered Files
1
Omitted Files
0
Analyzed Bytes
15.3 KB
Sections Completed
2
Sections Skipped
1
Behavior Probes
0/0
Audit Metadata
Score
93/100
Verdict
PASS
Confidence
low
Sections
2/3 completed
Mode
risk
Files Scanned
1
Duration
74.1s
Analyzed
Apr 15, 2026, 09:15 PM
Security Audit — zeroleaks — finance-metrics-quickref