form-1099-nec
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate procedural guidance for tax compliance, referencing official IRS forms, publications, and the Internal Revenue Code. It utilizes trusted government domains (irs.gov) and resources belonging to the skill's author (jupid.com).
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied tax data, such as payee names and payment amounts, and interpolates them into filing plans and browser-driven filing workflows. This ingestion of untrusted data represents an attack surface for indirect injection. However, the skill incorporates extensive validation steps—including TIN matching, mathematical reconciliation, and mandatory user review checkpoints—that effectively mitigate these risks. The instructions explicitly command the agent to pause for user identity verification and never store sensitive identifiers like SSNs in logs, demonstrating a robust security posture for data handling.
Audit Metadata