spruce-point-accounting-short
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references public research reports and an external archive from Spruce Point Capital (sprucepointcap.com) as primary sources for forensic analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external financial data, which creates a surface for potential instruction injection.
- Ingestion points: Primary documents, product data, research materials, and financial filings as specified in SKILL.md and invest.md.
- Boundary markers: No explicit delimiters or guardrails against instruction injection within the processed documents are present.
- Capability inventory: The provided skill files do not request or utilize dangerous capabilities such as file system writing, network exfiltration, or arbitrary command execution.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the external content before it is processed by the agent.
Audit Metadata