prepaid-schedule
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements its stated functionality using standard Python data processing libraries (pandas, openpyxl, pdfplumber). The code follows expected patterns for financial data extraction and reporting.
- [DATA_EXPOSURE]: While the skill processes sensitive invoice data, it does so entirely within the local environment. No network utilities or exfiltration patterns were detected in the scripts or instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data through the processing of external invoice files (PDF, CSV, XLSX). However, this risk is mitigated by the restricted capability set of the skill, which is limited to local file I/O and does not include arbitrary command execution or network access.
Audit Metadata