401k-plan-decoder
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill consists exclusively of markdown-based instructions for the agent to follow when analyzing user-provided retirement plan documents.
- [DATA_EXFILTRATION]: The skill does not contain any network-facing commands (e.g., curl, wget, or fetch) or instructions to transmit the processed financial data to external destinations. User-provided data remains within the local context of the agent.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest and interpret external documents provided by a user, it possesses no exploitable capabilities such as file system writing, subprocess execution, or network access, thereby eliminating the risk of system compromise through document poisoning.
Audit Metadata