bank-reconciliation
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues, malicious code, or prompt injections were found in the skill or its associated files. The provided script, reconciliation_summary.py, is a simple utility for data counting with no network or system-altering capabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface through the processing of external financial documents, which is necessary for its primary function of bank reconciliation.
- Ingestion points: Financial statements and transaction records (CSV, PDF, QBO) imported via agent tools as described in SKILL.md.
- Boundary markers: None explicitly defined in the instructions, though the skill mandates a structured normalization phase for all ingested data.
- Capability inventory: The agent is permitted to use file reading/writing tools and the local reconciliation_summary.py script for summarization.
- Sanitization: Instructions include standardizing vendor names, dates, and currency amounts, which acts as a data validation layer for ingested content.
Audit Metadata