business-case
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to provide financial analysis templates and formulas including ROI, NPV, IRR, and TCO. The content consists of static markdown and benign Python code snippets for mathematical calculations. No security risks such as prompt injection, obfuscation, or data exfiltration were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via tools like WebFetch and WebSearch. There are no explicit boundary markers or sanitization procedures defined for this external data. However, since the skill only provides templates and does not execute subprocesses or dynamic code using this data, the capability inventory for exploitation is non-existent within the skill itself.
Audit Metadata