form-4506-t
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXPOSURE]: The skill is designed to collect and process highly sensitive Personally Identifiable Information (PII), including Social Security Numbers (SSNs), Individual Taxpayer Identification Numbers (ITINs), Employer Identification Numbers (EINs), and full legal names. These are required for the legitimate primary purpose of filling out IRS Form 4506-T. The skill includes explicit security and consent rules directing the agent to process this data at submission time and then discard it, and specifically forbids storing SSNs, IDs, or signed PDFs in logs.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted user data (PII) and interpolates it into a markdown draft without explicit sanitization or boundary markers. However, the risk is mitigated as the output is a draft intended for the user to print and sign, providing a natural human-in-the-loop review step.
- Ingestion points: User-supplied PII (Name, SSN, Address) collected in the Prerequisites section of SKILL.md.
- Boundary markers: Absent in the output draft format.
- Capability inventory: PDF generation and browser navigation to official IRS portals (filing.md).
- Sanitization: Absent; the skill does not specify escaping or validation for the interpolated strings.
- [EXTERNAL_DOWNLOADS]: The skill references multiple official IRS documents and portals (irs.gov), as well as well-known identity verification services (ID.me). These are legitimate, trusted resources for tax-related workflows.
Audit Metadata