byted-sol-excel-bill-discount
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs expected data processing tasks including Excel reading, aggregation, and formatting. It utilizes well-known libraries such as pandas and xlsxwriter to generate output files.\n- [COMMAND_EXECUTION]: The skill uses a command-line interface to invoke a local Python script (process_bill.py). The script path is local to the skill installation and the command logic is straightforward for the intended purpose of processing a file path provided by the user.\n- [PROMPT_INJECTION]: The skill processes untrusted input from external Excel and CSV files, which presents a surface for indirect prompt injection.\n
- Ingestion points: The script process_bill.py accepts a file path as a command-line argument and reads the contents into memory for processing.\n
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within the processed files.\n
- Capability inventory: The skill can read from and write to the filesystem and is invoked via a shell command.\n
- Sanitization: The script performs data formatting and aggregation but does not include logic to sanitize or validate the content of the cells against malicious injection patterns before processing.
Audit Metadata