csv-to-sif
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform installation via symlinks and to write the final.sifoutput files to the local file system. These operations are consistent with the skill's stated purpose of file conversion. - [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection (Category 8) due to its core function of processing untrusted data from external sources.
- Ingestion points: Data is ingested from user-provided CSV/Excel files, pasted text, and external Google Sheets content (via Spreadsheet ID).
- Boundary markers: Absent. The instructions do not define clear delimiters or provide 'ignore embedded instructions' warnings for the data being processed.
- Capability inventory: The skill has access to powerful tools including
Bash,Write,Edit, andReadacrossSKILL.mdand referenced files. - Sanitization: No validation or sanitization logic is present to filter malicious instructions that might be embedded within the product list columns (e.g., in the 'Description' or 'Product Name' fields).
Audit Metadata