budget-pacing-tracker
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and evaluation files contain no signs of malicious code, prompt injection, or unauthorized data access. The provided logic is purely instructional for budget tracking tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted user data such as budget figures, spend amounts, and time periods. However, because the skill lacks executable capabilities like network access, file writing, or command execution, this surface does not pose a security risk.
- Ingestion points: User-provided budget, spend, and period data (SKILL.md).
- Boundary markers: None specified for input data.
- Capability inventory: None detected across files; the skill only generates text-based reports and advice.
- Sanitization: No explicit sanitization or validation of the input metrics is defined.
Audit Metadata