production-documents
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests project artifacts and reference files which could contain untrusted data. \n
- Ingestion points: Reads
../../references/PRODUCTION_DOCUMENTS.mdand project-relative artifacts. \n - Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded prompts within the source documents. \n
- Capability inventory: The skill performs file-write operations to XLSX, DOCX, PDF, and JSON formats using local Python scripts. \n
- Sanitization: No mention of sanitizing or validating input data before processing. \n- [COMMAND_EXECUTION]: The skill executes local scripts for document generation and auditing. \n
- Evidence: Calls
scripts/production_documents.pyandscripts/document_companions.pyas part of its core functionality.
Audit Metadata