money-verify
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) due to its core function of fetching and analyzing untrusted external content.
- Ingestion points: The skill ingests untrusted data through user-provided arguments (job descriptions/links) and the
WebFetchtool which retrieves content from arbitrary external websites. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from obeying instructions that might be embedded within the fetched recruitment text or web content.
- Capability inventory: The skill has access to sensitive tools including
Bash(*),Write, andEditas declared in theallowed-toolsmetadata, creating a risk if an injection overrides agent instructions. - Sanitization: The skill lacks mechanisms to sanitize or validate the content retrieved from external sources before it is analyzed by the agent.
Audit Metadata