sent-account-readiness
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes explicit security instructions to prevent credential leakage, instructing the agent to never request, store, or print tokens or API keys. It directs users to use standard OAuth 2.1/PKCE flows managed by the client application.
- [SAFE]: The skill implements data minimization and privacy practices by instructing the agent to mask identifiers and return only the minimum account fields necessary for the specific task.
- [SAFE]: The skill acts as a diagnostic tool for Sent account readiness using Model Context Protocol (MCP) tools (
account.get,balance.get,onboarding.status). While it ingests external API data (a surface for indirect prompt injection), it mitigates risk through explicit formatting and privacy constraints.
Audit Metadata