wps-certificate

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python scripts to perform document automation and file operations, which is consistent with its stated purpose of generating certificates.
  • [PROMPT_INJECTION]: The skill ingests data from external sources (Excel files or user-provided lists) to populate document templates. While this creates a surface for indirect prompt injection, the impact is limited by the skill's specific output format.
  • Ingestion points: Data is read from files using openpyxl as described in Step 2 of SKILL.md.
  • Boundary markers: No explicit markers or instructions to ignore embedded commands are present.
  • Capability inventory: The skill has permissions to write files and execute bash commands.
  • Sanitization: Input data is interpolated directly into document templates without explicit sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 06:23 AM