saas-accounting-system
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive design reference for building a double-entry accounting system. It promotes secure engineering practices, such as using decimal types for financial precision and enforcing multi-tenant isolation through mandatory franchise_id filtering on all queries. No malicious code or dangerous instructions were detected.- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, API keys, or unauthorized data access patterns were found. The system design explicitly includes multi-tenant controls to prevent data leakage between different users or organizations by scoping all account and journal data to a specific franchise_id.- [PROMPT_INJECTION]: The instructions are focused on domain-specific logic and do not contain any patterns typical of prompt injection attacks. The skill describes workflows for processing user-provided transaction data (sales, expenses) using structured SQL parameters and database-layer validation, which effectively delimits untrusted input and prevents instruction overrides.
Audit Metadata