saas-agent-revenue-recognition
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and templates. It does not include any scripts, executables, or code that could be run on a host system.
- [SAFE]: No patterns for data exfiltration, credential harvesting, or unauthorized file access were detected. The skill's logic is focused on interpreting business data for accounting purposes.
- [SAFE]: No obfuscation (Base64, hex, zero-width characters) or prompt injection attempts were identified. The content is professional and structurally transparent.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a logic engine for processing external business data. 1. Ingestion points: Untrusted data enters the agent context through the 'Required Inputs' section in SKILL.md (pricing primitives, contract templates, SLA terms, and outcome definitions). 2. Boundary markers: None defined to explicitly delimit or isolate external content. 3. Capability inventory: The skill does not define or use any subprocess calls, network operations, or file-writing tools. 4. Sanitization: No explicit sanitization or validation of input data is defined. 5. Risk Assessment: The risk is negligible because the skill's primary function is drafting financial memos, and it lacks the system-level capabilities required to weaponize any potential prompt injection.
Audit Metadata