document-generation-docx-report-generation
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The provided file contains only instructional markdown content. It does not include executable scripts, shell commands (other than installation examples for the user), or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for generating documents from data, which creates a potential surface for indirect prompt injection if the data source is untrusted. Because the skill currently only provides documentation without automated execution capabilities, the risk is mitigated.
- Ingestion points: Data sources used for programmatic population mentioned in
SKILL.md. - Boundary markers: Absent from the instructions.
- Capability inventory: None; the skill provides no code or tool configurations.
- Sanitization: Not specified in the workflow steps.
Audit Metadata