receipt-expense-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
setup-guide.mdfile provides instructions for installing third-party dependencies includingsurya-ocr,torch,Pillow,jaconv, andffmpegvia standard package managers (pip and winget). - [COMMAND_EXECUTION]: The skill's primary workflow involves executing the provided Python script
receipt_sorter.pyvia the command line to process and move files. It also references the use of browser automation (Playwright) for interacting with Dynamics 365 interfaces. - [SAFE]: The Python script implements a
slugifyfunction that sanitizes text extracted via OCR before it is used in filenames or paths. This effectively mitigates injection risks such as path traversal that could arise from processing maliciously crafted receipt images.
Audit Metadata