document-reader
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external document files (PDF, .docx, .xlsx, .pptx). This creates a surface for indirect prompt injection where instructions embedded in a document might influence the agent's behavior. This is a common characteristic of document processing tools.
- Ingestion points: Content is read from user-provided files as described in SKILL.md.
- Boundary markers: The instructions do not include markers or warnings to the agent to disregard potential commands found within the processed documents.
- Capability inventory: The skill focus is on text extraction and summarization, presenting results to the agent's context.
- Sanitization: No specific sanitization or filtering of the extracted text is performed.
Audit Metadata