finance-debt
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate financial calculations and report generation.
- [COMMAND_EXECUTION]: The skill instructions include writing a markdown report (FINANCE-DEBT.md) to the local file system. This behavior is consistent with the skill's purpose and does not involve executing unauthorized commands.
- [DATA_EXFILTRATION]: The skill requests financial information such as debt balances and credit scores to perform its analysis. This data is provided by the user and remains within the agent's execution context for the purpose of the strategy generation.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes user input and writes it to a file. 1. Ingestion points: User-provided debt names, types, and goal descriptions. 2. Boundary markers: None provided in the output template to distinguish user-provided data from system-generated content. 3. Capability inventory: File system write (FINANCE-DEBT.md). 4. Sanitization: None observed for user-provided strings before they are written to the report file.
Audit Metadata