bir-tax-filing
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bash_toolto execute Python scripts for tax computations, data categorization, and form generation based on BIR rules. This is the core functional logic of the skill.\n- [DATA_EXFILTRATION]: Orchestrates data flow between internal systems (Odoo transactions) and storage/tracking platforms (Supabase, Notion). These network operations are standard integrations for the skill's business purpose.\n- [EXTERNAL_DOWNLOADS]: References the use of well-known libraries such as PaddleOCR for form data extraction and ReportLab for PDF generation. These are recognized industry-standard tools.\n- [PROMPT_INJECTION]: The skill processes external data from Odoo records and OCR scans, creating a surface for indirect prompt injection. \n - Ingestion points: Data retrieved from Odoo (transactions), Supabase (ATP permit records), and PaddleOCR (scanned form text) in
SKILL.md.\n - Boundary markers: Absent.\n
- Capability inventory:
bash_toolfor running computation scripts andcreate_filefor generating tax documents.\n - Sanitization: Not explicitly defined in the provided instructional text.
Audit Metadata