dre-balanco
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill provides guidelines for financial analysis and calculation of indicators like EBITDA and ROE. It operates within the agent's standard conversational capabilities without requiring sensitive permissions or external network access.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to ingest and process user-provided financial data (e.g., revenue, expenses in SKILL.md examples). While it lacks explicit boundary markers or sanitization for this external data, it also lacks any dangerous capabilities—such as file writing, network operations, or shell execution—that could be exploited if an injection occurred. The risk is considered negligible due to the absence of exploitable tools.
Audit Metadata