analyze-japan-debt-service-tax-burden
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches economic data from official and well-known services, including the St. Louis Fed (FRED) and the US Treasury International Capital (TIC) system. These data fetches are performed via plain-text URLs for CSV and text files, which are standard for financial analysis skills.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from remote sources. While this presents a surface for indirect injection, the scripts utilize structured parsing (via pandas and regex) to convert data into numerical values, which effectively sanitizes the input before it is used for reporting or visualization.
- [COMMAND_EXECUTION]: The skill provides instructions for the user to execute local Python scripts to generate charts and perform simulations. These scripts use standard scientific libraries and do not contain any arbitrary command execution or privilege escalation patterns.
- [SAFE]: The skill follows best practices for data management, including local caching of remote data to reduce network calls and using non-interactive backends for visualization (matplotlib 'Agg'). No persistence mechanisms or obfuscation techniques were observed.
Audit Metadata