form-5329
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing user-supplied tax information to facilitate browser-based filing operations. This establishes a surface for indirect prompt injection, though the skill includes explicit safety instructions to mitigate potential misuse.
- Ingestion points: User-provided PII and tax data collected during the drafting process described in
SKILL.md. - Boundary markers: The instructions require the agent to stop for explicit user answers and confirmation before proceeding to filing steps.
- Capability inventory:
filing.mddetails browser automation capabilities for navigating the IRS Free File Fillable Forms site and commercial tax software platforms. - Sanitization: The skill includes specific security rules that prohibit the storage of PII in agent logs and require user-verified narratives for waiver requests.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches official tax forms, instructions, and publications from the Internal Revenue Service (irs.gov), which is a trusted government organization.
Audit Metadata