specialist-support-support-finance-tracker
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and a prompt for a subagent. It does not contain any scripts, binaries, or executable code, which significantly reduces the attack surface.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided financial questions through a subagent, creating a surface for potential indirect prompt injection.
- Ingestion points: User questions are passed to the 'Finance-Tracker' subagent.
- Boundary markers: None present in the provided prompt string.
- Capability inventory: The subagent is limited to financial analysis and reporting; no dangerous tools or system access are enabled in the provided configuration.
- Sanitization: No explicit sanitization or filtering of user input is implemented within the instruction set.
Audit Metadata