financial-document-parser
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of financial documents (PDFs, images, CSVs).
- Ingestion points: Processes user-provided financial PDFs, bank statements, receipts, and invoices (SKILL.md).
- Boundary markers: None identified. The instructions do not specify the use of delimiters or 'ignore' instructions for the content of the processed documents.
- Capability inventory: The skill generates structured output including CSV and Markdown reports, but does not explicitly use shell execution or network operations in the provided instructions.
- Sanitization: No evidence of sanitization or validation of the document content before it is interpolated into the agent's analysis context.
Audit Metadata