schedule-8812
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate procedural guidance for tax year 2026 based on official IRS documentation and the Internal Revenue Code (IRC).
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface in
SKILL.mdandqualifying-child-test.md, as it processes untrusted user input regarding dependent identities and relationships. These inputs are interpolated into worksheets and browser automation tasks. While no explicit boundary markers or sanitization steps are defined, the risk is inherent to the tax preparation use-case and is managed by the agent's internal safety controls. - [SAFE]: The skill collects highly sensitive PII (SSNs, ITINs, names, birthdates), but this is required for the intended purpose of filing Schedule 8812. The
filing.mdfile contains explicit security rules prohibiting the agent from logging or storing this information. - [SAFE]: External links and network references target the official IRS domain (
irs.gov) or well-known commercial tax filing services, which are recognized as trusted or safe sources for this context. - [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation commands were detected in the instructions or reference materials.
Audit Metadata