cash-flow-forecast
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes financial records such as invoices and transactions, which may contain text from external parties that could theoretically host malicious instructions.
- Ingestion points: Financial data retrieved from
invoicesandtransactionstables in the Well workspace. - Boundary markers: The instructions lack specific boundary markers or explicit commands to the agent to ignore instructions that might be embedded in invoice descriptions or transaction notes.
- Capability inventory: The skill's functionality is focused on data retrieval and mathematical projection; no capabilities for arbitrary command execution, network exfiltration, or file system modifications were identified.
- Sanitization: There is no evidence of sanitization or filtering logic for the strings retrieved from the processed financial records.
Audit Metadata