template-generation

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill generates JavaScript code intended to run within a spreadsheet application's automation environment. The code focuses on UI formatting (merging cells, background colors), data entry, and creating functional features like dropdown menus and filters via the Application.ActiveSheet API.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for generating further content based on user requirements. While it ingests user input to define the system's structure, the capabilities are limited to spreadsheet manipulation.
  • Ingestion points: User instructions defining the type of management system and required columns in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: Cell value manipulation, styling, and spreadsheet features (AutoFilter, Validation) via local JS API in SKILL.md.
  • Sanitization: No specific sanitization instructions for user-provided labels, though the generated scripts are limited to spreadsheet-internal operations.
  • [SAFE]: The skill's logic is entirely contained within the spreadsheet environment. It does not perform network operations, access external URLs, or interact with sensitive system files or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 07:32 AM
Security Audit — agent-trust-hub — template-generation