ah
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Node.js file
ah.mjsusesspawnSyncto execute a local Python script. Arguments are passed as an array directly to the process without invoking a shell, which is a secure implementation that prevents command injection.\n- [EXTERNAL_DOWNLOADS]: The skill requires thepypdfPython library, which is a standard, well-known package for PDF manipulation available via official registries. This dependency is used solely for its documented purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from PDF invoices.\n - Ingestion points:
parse_invoice.pyextracts text from user-provided PDF files via thepypdflibrary.\n - Boundary markers: None used.\n
- Capability inventory: The skill reads local PDF files and writes CSV output to the local file system.\n
- Sanitization: The parser employs strict regular expression matching and validates that the sum of line items matches the invoice's grand total, mitigating the risk of processing malicious instructions embedded in the document text.
Audit Metadata