fixed-income-bonds
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external CSV files for financial analysis, creating a surface for potential indirect instructions if the data is not isolated. However, the current implementation is restricted to numerical summaries.
- Ingestion points: The
scripts/fixed_income_bonds_diagnostics.pyscript reads the contents ofinput.csvusingpandas.read_csv. - Boundary markers: No explicit delimiters are defined in the instructions to isolate the external data from the agent's context.
- Capability inventory: The skill allows reading local data and writing diagnostic results to a JSON file.
- Sanitization: The script uses
pandastype conversion with error coercion to validate data types before analysis.
Audit Metadata