ca-form-568

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The filing.md file documents procedures for using browser automation frameworks such as Playwright, Puppeteer, and Selenium to interact with the California Franchise Tax Board (FTB) website for payment and filing tasks.
  • [DYNAMIC_EXECUTION]: The skill describes using the pypdf library or similar PDF tools to programmatically map draft tax values to official PDF form fields during the paper-filing preparation process.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting highly sensitive user data (SSNs, EINs, financial records) and providing an automated pathway to external web services through browser tooling.
  • Ingestion points: User-provided tax facts, member identification details, and financial profit/loss data requested in SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or boundary markers for user-provided data inputs.
  • Capability inventory: The skill documents browser automation capabilities for navigating government payment portals (FTB Web Pay) and business tax software (described in filing.md).
  • Sanitization: The filing.md file contains a 'Security and consent rules' section which explicitly forbids the storage of SSNs, EINs, or bank account numbers in agent logs or transcripts, acting as a procedural safeguard.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 03:19 PM