closing-disclosure-decoder
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data provided by the user in the form of mortgage disclosure documents.
- Ingestion points: The skill accepts user-provided text from 'The Closing Disclosure' and 'The Loan Estimate' as described in
SKILL.md. - Boundary markers: There are no specific boundary markers or 'ignore' instructions defined to prevent the agent from following commands embedded within the document text.
- Capability inventory: The skill possesses no capabilities for command execution, network operations, or file system writes, significantly limiting the impact of potential injections.
- Sanitization: No sanitization or input validation is specified in the instructions.
- [NO_CODE]: The skill contains no executable scripts, shell commands, or configuration files. It functions solely as a prompt-based instruction set for the AI agent.
Audit Metadata