archive-crawler
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes inline Python code via
python3 -cto handle file format parsing, specifically for extracting text from.docxfiles and validating the integrity of.pstarchives. - [COMMAND_EXECUTION]: The skill relies on external command-line utilities such as
antiword,catdoc, andreadpstto process legacy Microsoft Word documents and Outlook data files. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes large volumes of untrusted data from multiple sources, including local filesystem mounts, Dropbox, Backblaze B2, and Gmail archives.
- Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from interpreting instructions that might be embedded within the files being scanned.
- Capability inventory: The skill has the ability to read arbitrary files within the allow-listed paths, execute parsing commands, and write the extracted content to the agent's long-term storage (brain pages).
- Sanitization: While the skill filters for 'high-value' content and strips HTML tags for display, it does not implement specific sanitization to neutralize potential prompt injection attacks contained in the processed text.
Audit Metadata