security-deposit-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional markdown content and templates for the AI agent to follow. It does not include any scripts, executable files, or command-line operations.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data provided by the user, such as lease clauses, landlord communications, and move-in/move-out reports.
- Ingestion points: External data enters the context through user-provided documents and text inputs (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded within the user-provided legal documents.
- Capability inventory: The skill's capabilities are restricted to text generation and formatting. It lacks access to the file system, network, or shell execution tools.
- Sanitization: No input sanitization or validation of the processed data is implemented.
Audit Metadata