data-to-document
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires standard Python libraries (pandas, pyyaml, babel) and the official Typst CLI tool. All recommendations point to official and well-known sources.
- [COMMAND_EXECUTION]: The skill uses the 'typst compile' command to generate PDFs. The command execution is constrained to local paths and is essential for the skill's primary function.
- [PROMPT_INJECTION]: As the skill processes external datasets, there is an inherent surface for indirect prompt injection. However, the skill explicitly references a 'pii-flag' safeguard and separates data from the rendering logic by passing data as JSON, which significantly reduces the risk of malicious input affecting the typesetting engine.
Audit Metadata