billing-cycle-manager-scott-margetts

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill focuses on legitimate legal project management workflows, including billing preparation, invoice review, and cashflow modeling. It incorporates several safety best practices, such as requiring a 'Stop. Confirm identifiers' block before generating output to ensure data integrity and matter attribution.
  • [DATA_EXFILTRATION]: While the skill processes sensitive financial data (Work-In-Progress records, invoices, and billing queries) and can interact with Microsoft 365 environments via an MCP connector, its operations are strictly scoped to internal matter folders and official communication channels (SharePoint, Outlook). No instructions were found that attempt to exfiltrate data to external or unauthorized domains.
  • [PROMPT_INJECTION]: The instructions do not contain any patterns typical of prompt injection, such as attempts to bypass safety filters or ignore prior instructions. Instead, the skill enforces strict professional boundaries, specifically distinguishing between the role of a Legal Project Manager and that of an attorney.
  • [REMOTE_CODE_EXECUTION]: There are no patterns of remote code execution, external script downloads, or dynamic code generation. The skill relies on standard data processing and document generation (Word and CSV files) within a controlled environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 08:33 PM
Security Audit — agent-trust-hub — billing-cycle-manager-scott-margetts