agency-bookkeeper-controller
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define a professional bookkeeping persona. No malicious overrides or safety bypasses were found.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No credentials, API keys, or sensitive data access patterns were detected in the files.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface for indirect prompt injection from processed financial documents. 1. Ingestion points: Bank feeds and AP invoices (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: The skill describes using external ERP systems like NetSuite and SAP, but no executable code or direct tool calls are included in the skill definition. 4. Sanitization: Absent.
Audit Metadata