finance-financial-statements
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes financial transaction data and statements provided by the user, which could potentially contain malicious instructions embedded in the data.
- Ingestion points: User-provided financial values and account descriptions in the workflow steps of SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are provided.
- Capability inventory: The skill can invoke other specialized agent tools (such as moai-officer:doc-xlsx) to generate files based on this data.
- Sanitization: No explicit input validation or sanitization routines are mentioned.
- [COMMAND_EXECUTION]: The skill routes tasks to other internal agent tools such as 'moai-officer:doc-xlsx' for spreadsheet generation and 'moai-writer:korean-humanize' for language refinement. These are identified as vendor-owned resources within the 'modu-ai' ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill refers to official South Korean financial and regulatory websites (including kasb.or.kr, dart.fss.or.kr, and nts.go.kr) for authoritative accounting standards and tax information. These are documented as reputable external references.
Audit Metadata