netsuite-finance-analyst
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements least-privilege principles by defaulting to read-only analytical operations and requiring explicit confirmation for any data modifications.
- [PROMPT_INJECTION]: The 'SafeWords' protocol provides clear instructions to ignore instructions embedded in retrieved data, notes, or documents, mitigating potential indirect prompt injection attacks.
- [DATA_EXFILTRATION]: No evidence of unauthorized network communication or data exfiltration was found; all operations are confined to NetSuite's authorized tools.
- [COMMAND_EXECUTION]: Analytical operations are performed via structured SuiteQL and standard reports; no dangerous system-level command execution or arbitrary shell access is present.
- [CREDENTIALS_UNSAFE]: The skill does not contain hardcoded credentials, API keys, or sensitive configuration details, relying instead on secure platform-managed connectors.
Audit Metadata