form-1099-q
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied data, including tax form amounts and education expense records, to perform calculations and guide browser automation flows.
- Ingestion points:
SKILL.md(Boxes 1-6 from Form 1099-Q and QHEE expense details). - Boundary markers: The instructions use structured workflows and mandate that the agent ask clarifying questions and stop if data is missing.
- Capability inventory:
filing.mddescribes the use of browser automation to interact with the IRS Free File Fillable Forms portal. - Sanitization: The skill implements mathematical validation checks, such as verifying that Gross Distribution equals Earnings plus Basis, to ensure data consistency.
- [SAFE]: The skill directs the agent to interact with the official Internal Revenue Service (
irs.gov) domain for forms and instructions, which is a recognized and well-known government service.
Audit Metadata