ca-form-568
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
filing.mdfile documents procedures for using browser automation frameworks such as Playwright, Puppeteer, and Selenium to interact with the California Franchise Tax Board (FTB) website for payment and filing tasks. - [DYNAMIC_EXECUTION]: The skill describes using the
pypdflibrary or similar PDF tools to programmatically map draft tax values to official PDF form fields during the paper-filing preparation process. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting highly sensitive user data (SSNs, EINs, financial records) and providing an automated pathway to external web services through browser tooling.
- Ingestion points: User-provided tax facts, member identification details, and financial profit/loss data requested in
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers for user-provided data inputs.
- Capability inventory: The skill documents browser automation capabilities for navigating government payment portals (FTB Web Pay) and business tax software (described in
filing.md). - Sanitization: The
filing.mdfile contains a 'Security and consent rules' section which explicitly forbids the storage of SSNs, EINs, or bank account numbers in agent logs or transcripts, acting as a procedural safeguard.
Audit Metadata