agency-finance-tracker
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill's instructions and provided code focus exclusively on financial modeling, risk assessment, and performance reporting.\n- [PROMPT_INJECTION]: The skill is designed to ingest and process financial data (historical records, payment schedules) as untrusted inputs in SKILL.md. While it lacks explicit boundary markers or sanitization logic, its capabilities are confined to mathematical and statistical analysis using standard libraries (pandas, numpy, scipy). No network access, file system writes, or dangerous dynamic execution (eval/exec) patterns are present, mitigating the risk of indirect prompt injection.\n- [COMMAND_EXECUTION]: The workflow section in SKILL.md includes markdown placeholders/comments for shell-based validation steps. These are non-executable descriptions of a manual process and do not contain any malicious command sequences, privilege escalation attempts, or unauthorized system access.
Audit Metadata