principal-protected-notes
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a Python script for deterministic financial diagnostics. The script performs data cleaning and numeric aggregation using pandas without performing any network operations or dynamic code execution.
- [SAFE]: All resource references and script executions are local to the skill's own directory structure. No external dependencies beyond the standard data science library 'pandas' are required.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided CSV data which represents a standard attack surface for indirect prompt injection. However, the diagnostic script strictly coerces data to numeric types for summary statistics, significantly mitigating the risk of instructions embedded in the data influencing the agent. The ingestion point is in
scripts/principal_protected_notes_diagnostics.pyviapd.read_csv, and while boundary markers are absent in the raw CSV, the mathematical nature of the diagnostics provides inherent sanitization for the numeric fields.
Audit Metadata