doc-handler
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests text from external documents (DOCX, PDF, XLSX) and returns it to the agent. This represents a potential surface for indirect prompt injection, as malicious instructions embedded within a processed document could attempt to influence the agent's behavior. This is an inherent risk of document processing skills.- [SAFE]: The skill relies on standard, reputable Python libraries (pandas, pdfplumber, python-docx, openpyxl) for its core functionality. The implementation is transparent and does not involve unauthorized network operations, credential harvesting, or persistence mechanisms.
Audit Metadata