pipa-budget-setup
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection through the processing of untrusted data.
- Ingestion points: In Step 2, the skill reads existing tracker files (e.g.,
.agents/project-budget.md) to preserve existing project rows. - Boundary markers: The instructions do not specify any delimiters or safety warnings to ensure the agent ignores instructions that may be embedded within the project budget file.
- Capability inventory: The skill has the capability to read and write files on the local system.
- Sanitization: There is no mechanism described for sanitizing or validating the content read from external files before it is processed or written back to the disk.
- [DATA_EXFILTRATION]: The skill accesses a file in a hidden directory within the user's home folder (
~/.pipa/communication-style.md). While the stated purpose is for communication styling, accessing files in the home directory is a sensitive operation that increases the potential surface area for data exposure if the agent is compromised.
Audit Metadata