invoice-organizer

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (invoices, receipts) to drive its core logic.
  • Ingestion points: File content extraction from PDFs and images (SKILL.md).
  • Boundary markers: The instructions lack delimiters or safety warnings to ignore instructions embedded within the processed invoices.
  • Capability inventory: Shell commands including find, mkdir, cp, and mv for file system manipulation (SKILL.md).
  • Sanitization: No evidence of sanitization or filtering of extracted text before it is used for renaming or report generation.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to perform file organization tasks.
  • Evidence: Uses find, mkdir, cp, and mv to locate, organize, and rename files based on extracted metadata (SKILL.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:46 PM