a-share-ipo-prospectus-drafter
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a structural framework and instructions for drafting legal and financial documents in compliance with Chinese securities laws. The analysis confirms the absence of command execution, file system access, persistence mechanisms, or credential harvesting. All metadata is consistent with the described functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted business and financial data provided by the user (SKILL.md). While there are no specific boundary markers or sanitization procedures defined to handle this input, the skill does not define any scripts or tool capabilities. The resulting capability inventory is empty, meaning there are no subprocess calls, file writes, or network operations available for an attacker to exploit through data injection.
Audit Metadata