tax-housing-loan-context
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes examples of using a command-line interface tool (
uv run shinkoku) to manage housing loan data within a local database. These are functional examples for the intended tax filing plugin environment and do not perform unauthorized actions. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing user financial data such as loan balances and income. 1. Ingestion points: User-provided housing and financial data processed by the agent. 2. Boundary markers: None. 3. Capability inventory: None (the files consist of static markdown documentation). 4. Sanitization: Not applicable for static reference materials. This represents an attack surface for data ingestion, but the skill contains no executable logic to exploit it.
Audit Metadata