qonto-asset-registry
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources that could contain malicious instructions.
- Ingestion points: Transaction labels, supplier invoice descriptions, and attachment metadata are retrieved from the Qonto account (SKILL.md).
- Boundary markers: The instructions do not specify delimiters or guidelines to ignore instructions embedded within the transaction or invoice data.
- Capability inventory: The skill is limited to reading data via the Qonto MCP and the Read tool, with no network or write permissions granted in the configuration (SKILL.md).
- Sanitization: No explicit sanitization or escaping of transaction-derived text is mentioned before processing.
Audit Metadata