finance-quick
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the model's context. It explicitly states that no external API calls or subagents are allowed, and all math is done inline, which effectively prevents data exfiltration and remote code execution.
- [SAFE]: No obfuscation techniques, base64 encoding, or hidden characters were detected in the instructions or example inputs.
- [SAFE]: The skill focuses on processing user-provided numerical inputs to generate text-based output. It does not attempt to access sensitive system files, modify environment variables, or establish persistence.
- [PROMPT_INJECTION]: The skill ingests untrusted user input (financial data) which technically constitutes an indirect prompt injection surface. However, because the skill has no capability to write to the file system, execute shell commands, or make network calls, this surface carries no operational risk.
Audit Metadata