openaccountants-us-ma
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches tax logic and authoritative rules from the vendor's MCP server at
https://www.openaccountants.com/api/mcp. This mechanism ensures the agent uses current accounting standards. - [DATA_EXFILTRATION]: Transmits user-provided data, including tax scenarios and working papers, to the vendor's infrastructure when the
request_accountant_reviewtool is invoked. - [PROMPT_INJECTION]: The skill utilizes instructions dynamically loaded at runtime from the OpenAccountants API.
- Ingestion points: Markdown content returned by the
get_skilltool as described inSKILL.md. - Boundary markers: No explicit delimiters or warnings are used to isolate the loaded content.
- Capability inventory: Interaction with the
openaccountantsMCP server tools (start,get_skill,request_accountant_review). - Sanitization: The skill relies on the authority of the vendor's API for the safety of the returned markdown content.
Audit Metadata