impress
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system binaries for document processing. Evidence includes the use of
sofficefor headless conversions and thesubprocessmodule to executezipandunziputilities for ODP archive manipulation inSKILL.md. - [PROMPT_INJECTION]: The template generation workflow uses string replacement to modify XML content, presenting an indirect injection surface. Ingestion points: The
contentdictionary ingenerate_from_templatefunction inSKILL.md. Boundary markers: None identified in the provided code snippets to delimit user content. Capability inventory: File system access viasubprocessand office automation via theunolibrary as documented inSKILL.md. Sanitization: The logic uses direct string replacement without evidence of XML escaping or input validation.
Audit Metadata