lbo-model
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes data from external sources (web data and user-provided templates) to drive calculations and file generation. * Ingestion points: Data retrieved from SEC EDGAR, company Investor Relations pages, and user-provided
.xlsxtemplates. * Boundary markers: The skill does not define specific boundaries or instructions to ignore embedded commands within the processed data. * Capability inventory: File system write access via theopenpyxllibrary and the ability to execute a local Python recalculation script. * Sanitization: No explicit sanitization or validation of the external content is described. - [COMMAND_EXECUTION]: The skill executes a local Python script (
recalc.py) from a companion skill directory to perform workbook recalculation, which is a standard functional operation for its workflow. - [EXTERNAL_DOWNLOADS]: The skill retrieves financial information from well-known and reputable services such as SEC EDGAR and official corporate websites to ensure model accuracy.
- [SAFE]: The skill implements robust financial modeling standards, including section-by-section verification, professional formatting rules, and detailed logic checks.
Audit Metadata