form-1099-q

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied data, including tax form amounts and education expense records, to perform calculations and guide browser automation flows.
  • Ingestion points: SKILL.md (Boxes 1-6 from Form 1099-Q and QHEE expense details).
  • Boundary markers: The instructions use structured workflows and mandate that the agent ask clarifying questions and stop if data is missing.
  • Capability inventory: filing.md describes the use of browser automation to interact with the IRS Free File Fillable Forms portal.
  • Sanitization: The skill implements mathematical validation checks, such as verifying that Gross Distribution equals Earnings plus Basis, to ensure data consistency.
  • [SAFE]: The skill directs the agent to interact with the official Internal Revenue Service (irs.gov) domain for forms and instructions, which is a recognized and well-known government service.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 03:20 PM