application-bundle
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts
scripts/fill_docx.pyandscripts/embed_evidence.pyto process Word documents and convert images/PDFs. These scripts are invoked via defined commands to automate file manipulation tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by processing external user-provided data such as document templates, CSV mapping files, and evidence files.\n - Ingestion points: The skill reads user-provided DOCX templates, CSV data, and image/PDF evidence files (e.g.,
fill_docx.pyreads CSV mapping files).\n - Capability inventory: The skill performs file read and write operations using
python-docx,pymupdf, andPIL.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to differentiate between system instructions and potentially malicious data embedded in the user-supplied materials.\n
- Sanitization: There is no evidence of sanitization or content validation for the data interpolated into the document templates.
Audit Metadata