budget-planner
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data provided by the user, such as business plans and historical spend figures, which serves as an attack surface for indirect prompt injection.
- Ingestion points: Business plans, historical figures, or project descriptions provided by the user (SKILL.md).
- Boundary markers: Absent. The instructions do not define delimiters or specific warnings for the agent to ignore instructions embedded within the user-provided data.
- Capability inventory: Access to spreadsheet tools for creating and delivering Excel workbooks (SKILL.md).
- Sanitization: No explicit sanitization, validation, or content filtering of the input data is described.
Audit Metadata