report-generator
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's defined use case for workflow automation involving external inputs presents an indirect prompt injection vulnerability surface.
- Ingestion points: The description explicitly identifies email processing and spreadsheet operations as intended data sources.
- Boundary markers: There are no instructions or delimiters provided to isolate or ignore instructions potentially embedded within these external data sources.
- Capability inventory: The skill is configured with access to powerful tools including Bash, Read, Write, and Edit.
- Sanitization: No validation or sanitization requirements are defined for the data processed by the skill.
Audit Metadata