invoice
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The invoice templates (
assets/hourly-invoice-template.htmlandassets/subscription-invoice-template.html) reference CSS from Google Fonts, which is a well-known service. \n- [PROMPT_INJECTION]: The skill is designed to ingest and process work log data provided by users to populate invoice line items. This creates a surface for indirect prompt injection, though the potential impact is limited by the skill's restricted file-writing capabilities. \n - Ingestion points: User-pasted work log text (
SKILL.md). \n - Boundary markers: Not explicitly defined for the input data. \n
- Capability inventory: Reads and updates the local
clients.jsonfile; writes HTML files to the Desktop directory. \n - Sanitization: No specific sanitization or validation of the work log content is described.
Audit Metadata