rpa
Warn
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Provides implementations for establishing system persistence by modifying Linux crontab files (
rpa-scheduling.md) and creating Windows Scheduled Tasks viaschtasks.exe(rpa-scheduling.md). - [COMMAND_EXECUTION]: Includes patterns for full desktop automation, including mouse manipulation, keyboard simulation, and window control using the
pyautoguiandpywinautolibraries (rpa-desktop.md). - [COMMAND_EXECUTION]: Employs the
subprocessandpsutilmodules to programmatically launch, monitor, and terminate system processes (rpa-desktop.md). - [COMMAND_EXECUTION]: Leverages Playwright's
evaluateandadd_init_scriptmethods to execute custom JavaScript within the browser context for scraping and stealth purposes (rpa-browser-automation.md,rpa-data-extraction.md). - [DATA_EXFILTRATION]: Includes capabilities for sending extracted data to external endpoints through SMTP email (
rpa-documents.md), Slack webhooks, and Telegram bot APIs (rpa-error-handling.md,rpa-observability.md). - [DATA_EXFILTRATION]: Integrates with the
2captcha.comthird-party service, which involves transmitting image and site metadata to external servers for automated CAPTCHA solving (rpa-form-automation.md). - [EXTERNAL_DOWNLOADS]: Documentation instructs on fetching the
uvpackage manager installation script fromastral.shusing acurl | shpattern (rpa-cicd.md). - [COMMAND_EXECUTION]: Presents an indirect prompt injection attack surface.
- Ingestion points: Processes untrusted data from web pages via Playwright (
rpa-data-extraction.md) and emails via IMAP (rpa-documents.md). - Boundary markers: Examples lack delimiters or specific instructions to ignore malicious commands embedded in processed content.
- Capability inventory: Possesses powerful tools for desktop control (
pyautogui), persistence (crontab), and network transmission (aiosmtplib). - Sanitization: No explicit sanitization or validation of ingested content before it is processed or used in further actions.
Audit Metadata