odoo-finance-automation
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security violations were detected in the skill instructions or code snippets.
- [SAFE]: The skill uses environment variables (
os.getenv("ODOO_API_KEY")) for authentication, which is a secure practice for managing API credentials. - [COMMAND_EXECUTION]: The skill generates and runs Python scripts to communicate with the Odoo ERP system. This behavior is the core intended functionality of the skill.
- [EXTERNAL_DOWNLOADS]: Network operations are performed to connect with the external domain
https://erp.insightpulseai.net. This is a functional requirement for Odoo integration. - [PROMPT_INJECTION]: An indirect prompt injection surface is present because the skill processes external data (financial records, bank statements) and has the capability to execute commands and write files. 1. Ingestion points: Odoo API responses and Supabase data from SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: Python execution via
bash_tooland file creation viacreate_file(SKILL.md). 4. Sanitization: No explicit data sanitization logic provided.
Audit Metadata