usfiscaldata
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from potentially untrusted sources (scraping, enrichment, search), which represents a surface for indirect prompt injection.
- Ingestion points: External content is retrieved using the
sandbase_runtool for tasks like scraping and evidence gathering (SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore instructions' warnings when processing fetched data.
- Capability inventory: The skill instructions mention creating 'implementations' and 'artifacts', and it uses the SandBase API for network-based data retrieval (SKILL.md, references/sandbase-api-map.md).
- Sanitization: There are no requirements for sanitizing, escaping, or filtering the retrieved external content before it is processed by the agent.
Audit Metadata