inventory-report
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for local file processing and reporting. It does not contain any instructions for network communication or credential harvesting.
- [SAFE]: All included Python scripts (scripts/robust_xlsx.py and scripts/gen_summary.py) are legitimate tools for Excel parsing and summary generation, with no evidence of obfuscation or malicious intent.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external local files (PDF, XLSX, Images) which are handled by pymupdf, robust_xlsx.py, and rapidocr. While explicit boundary markers for this content are not specified in the instructions, the skill's capabilities are focused on structured reporting and verification, and no sanitization issues leading to escalation were observed. This surface is considered safe given the intended primary purpose.
Audit Metadata