fiscaliste
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to automatically ingest tax and financial data from a file named
foyer.jsonat the project root to establish user context. This data is then used in reasoning and passed as arguments to thecalc_ir.pyanddgfip_oracle.pyscripts. As this file represents untrusted input that influences the agent's logic while the agent possesses script execution and network capabilities, it creates a surface for indirect prompt injection.\n - Ingestion points: Reads
foyer.jsonandexamples/*.jsonto build the tax profile context.\n - Boundary markers: The instructions do not specify strict delimiters or warnings to ignore instructions embedded within the user-provided JSON data.\n
- Capability inventory: The skill uses
scripts/calc_ir.pyfor local deterministic calculations andscripts/dgfip_oracle.pyfor network-based verification against official tax simulators.\n - Sanitization: There is no explicit sanitization or validation logic described in the instructions for the data ingested from
foyer.jsonbefore it is used in prompts.
Audit Metadata