cash-flow-snapshot
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists exclusively of instructional text and prompt templates. It does not include any executable scripts, binaries, or configuration files that could execute commands or access the file system.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted financial data through prompt placeholders for invoices and bills in SKILL.md. While explicit boundary markers are absent, the skill lacks any capabilities such as subprocess calls, file writes, or network operations, preventing any potential injection from performing malicious actions. No sanitization is performed as the input is intended for text-based analysis by the AI.
- [DATA_EXPOSURE]: The skill processes sensitive financial information like cash on hand and invoice totals. However, the analysis shows no commands or network tools are present to exfiltrate this data. All external references are limited to the vendor's official website.
Audit Metadata