bills-due
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to an external MCP server at
https://api.wellapp.ai/v1/mcp. This domain is owned by the skill's vendor and serves as the primary gateway for fetching financial records. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes and displays data from external invoice records (such as vendor names or bill descriptions).
- Ingestion points: Retrieves invoice data through the
well_query_recordstool in SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the invoice fields are present.
- Capability inventory: The skill is limited to read-only API queries (
well_query_records,well_list_workspaces,well_get_schema) and does not possess high-risk capabilities like shell access or file system modification. - Sanitization: The skill does not explicitly validate or sanitize the text content of invoice records before including it in the report.
Audit Metadata