form-5329

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing user-supplied tax information to facilitate browser-based filing operations. This establishes a surface for indirect prompt injection, though the skill includes explicit safety instructions to mitigate potential misuse.
  • Ingestion points: User-provided PII and tax data collected during the drafting process described in SKILL.md.
  • Boundary markers: The instructions require the agent to stop for explicit user answers and confirmation before proceeding to filing steps.
  • Capability inventory: filing.md details browser automation capabilities for navigating the IRS Free File Fillable Forms site and commercial tax software platforms.
  • Sanitization: The skill includes specific security rules that prohibit the storage of PII in agent logs and require user-verified narratives for waiver requests.
  • [EXTERNAL_DOWNLOADS]: The skill references and fetches official tax forms, instructions, and publications from the Internal Revenue Service (irs.gov), which is a trusted government organization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 03:20 PM