invoice-generator
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or data exfiltration were detected.
- [SAFE]: The skill utilizes the 'office-mcp' toolset, which is appropriate and consistent with its stated purpose of creating and converting document-based invoices.
- [SAFE]: Indirect Prompt Injection Surface:
- Ingestion points: Untrusted data enters via
client_infoandline_itemsfields in SKILL.md. - Boundary markers: Absent; input is interpolated directly into templates without specific delimiters.
- Capability inventory: The skill can create and modify DOCX and PDF files using the 'office-mcp' tools.
- Sanitization: No explicit sanitization or validation of the external content is performed before processing.
Audit Metadata