event-budget
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data, specifically vendor quotes and pricing information, which presents a surface for indirect prompt injection.
- Ingestion points: User-provided quotes and vendor pricing are consumed as described in the workflow of SKILL.md.
- Boundary markers: No explicit delimiters or "ignore embedded instructions" warnings are specified for the ingested data.
- Capability inventory: The skill generates budget models, cash-flow schedules, and determines budget cut orders, all based on the untrusted input.
- Sanitization: No sanitization or validation of the input data is mentioned or implemented.
Audit Metadata