windows-accounting-app-operator
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (Excel, CSV, user input) to drive GUI operations in sensitive financial applications. This creates an attack surface where malicious data could influence the agent to perform unauthorized financial transactions.\n
- Ingestion points: Processes Excel, CSV, and user-provided transaction data in Phase 2.\n
- Boundary markers: No specific boundary markers or sanitization logic is described for the input data.\n
- Capability inventory: Performs GUI automation (click, send_keys) and file system writes (audit logs).\n
- Sanitization: None mentioned.\n- [REMOTE_CODE_EXECUTION]: The skill documentation references the use of
uvx windows-mcpto download and execute the primary automation engine. This pattern involves running code from a remote source at runtime.\n- [COMMAND_EXECUTION]: The skill utilizes command-line tools likeuvxto manage and run its automation engines.
Audit Metadata