skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/pdf-report-generator/Gen Agent Trust Hub
pdf-report-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (JSON, Excel, CSV) to generate HTML reports. The
to_htmlmethod inSKILL.mdperforms direct string interpolation of user-provided content into an HTML document template without escaping or sanitization. - Ingestion points: Data passed to
generate_progress_report,generate_cost_report, andgenerate_safety_reportinSKILL.md. - Boundary markers: None identified.
- Capability inventory: Filesystem write access via
export_to_exceland usage examples inSKILL.md. - Sanitization: None present in the
to_htmlimplementation.
Audit Metadata