invoice-generation-automation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The evaluation criteria in 'evals/pdf-rendering-with-puppeteer-and-handleb/criteria.json' requires the implementation of Puppeteer with the '--no-sandbox' and '--disable-setuid-sandbox' flags. Disabling the browser sandbox is a security risk when the browser is used to render content derived from untrusted sources, as it removes a primary layer of defense against potential browser exploits.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from ecommerce platforms (such as buyer names, billing addresses, and line item descriptions) and its interpolation into HTML templates for PDF generation. The lack of explicit sanitization instructions in the custom implementation sections or the evaluation tasks creates a vulnerability surface for HTML/CSS injection, which could be used to manipulate the content of generated legal documents or attempt to exploit the PDF rendering engine.
Audit Metadata