Back to skill

Security audit

Bank Financial Report

Security checks for vulnerabilities and agentic risk

Overview

This is a conversation-only financial analysis skill with disclosed limits, though its rating and credit/investment recommendation templates should be treated only as draft analyst support.

Install only if you want draft financial-statement analysis support. Do not paste confidential full reports or customer-level data unless your organization permits it, and do not rely on generated ratings, credit actions, valuation comments, or investment conclusions without qualified human review in your normal approval process.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill states that valuation conclusions, target prices, and investment advice are out of scope, but later includes prompts and report structures that move toward investment or credit recommendations. This inconsistency can cause the agent to exceed intended boundaries, producing regulated or high-stakes financial guidance that users may rely on despite the earlier disclaimer.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill says it does not provide formal credit ratings, but later defines multiple rating frameworks such as A/B+/B/C/D, AAA/BBB/BB/CCC/D, and quality/risk scores tied to lending or investment actions. That contradiction is dangerous because it can mislead users into treating the generated outputs as quasi-official ratings in credit underwriting or investment workflows.

Content

No source excerpt is available for this finding.