invoice-organizer
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data in the form of invoices and receipts to drive file system operations, creating a surface for indirect prompt injection.
- Ingestion points: The skill scans for and reads content from PDF, JPG, and PNG files using text extraction.
- Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided for the extraction phase.
- Capability inventory: The skill utilizes shell commands including
mkdir,cp,mv, andfindto reorganize files based on extracted metadata. - Sanitization: The instructions include a basic sanitization step by recommending the removal of special characters (except hyphens) from generated filenames.
- [COMMAND_EXECUTION]: The skill suggests creating persistent automation scripts to watch directories and execute organization logic. While this follows the skill's intended purpose, it involves the generation of executable scripts that perform file system modifications.
Audit Metadata