markdown-csv-reporter
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a read-only reporter that processes accessibility audit findings and produces structured CSV outputs for remediation tracking. Its operations are restricted to the local workspace and align with its stated purpose as an internal helper.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external markdown reports, which constitutes a potential vulnerability surface. However, the security risk is negligible because the skill's capabilities are limited to generating structured data files, and it mandates strict CSV formatting (quoting all fields) which prevents content from being executed as instructions.\n
- Ingestion points: MARKDOWN-ACCESSIBILITY-AUDIT.md (as specified in Behavioral Rule 1)\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the parsing process.\n
- Capability inventory: File writing (CSV generation) in the local working directory.\n
- Sanitization: The skill enforces UTF-8 BOM encoding and mandatory double-quoting of all text fields to ensure data integrity.
Audit Metadata