finance-report-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/generate_report.py utilizes subprocess.run to invoke external system tools like wkhtmltopdf, pandoc, and various web browsers for report generation and format conversion.
- [EXTERNAL_DOWNLOADS]: The script performs dynamic installation of the openpyxl and markdownify Python packages using os.system if they are not present in the execution environment.
- [DATA_EXFILTRATION]: The skill integrates with the Feishu API (open.feishu.cn) to download financial spreadsheets and upload generated reports, involving the transfer of financial data to a third-party service.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. (1) Ingestion points: Untrusted Excel files are parsed via openpyxl. (2) Boundary markers: No delimiters are used in the prompt interpolation. (3) Capability inventory: The skill has access to command execution and package installation. (4) Sanitization: Input data is not validated or escaped before being passed to the LLM.
Audit Metadata