invoice-aging
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources, creating a potential surface for indirect prompt injection.\n
- Ingestion points: The skill prompts the user for invoice lists (client name, amount, dates) and retrieves transaction data via the
transaction_searchtool.\n - Boundary markers: There are no explicit instructions to the agent to ignore or delimit instructions that might be embedded within the invoice data or transaction descriptions.\n
- Capability inventory: The skill utilizes the
transaction_searchtool to query financial records.\n - Sanitization: No sanitization or validation logic is defined for the ingested financial data.
Audit Metadata