company-profile
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates and executes JavaScript files (e.g.,
build_<name>.js) and Python scripts to automate the creation of PowerPoint presentations. The workflow involves writing data to local JSON files and then reading that data into generated scripts for chart rendering.- [COMMAND_EXECUTION]: The workflow requires the agent to execute shell commands, specificallynodeandpython, to run dynamically created scripts and verification tools likecheck.pyandrender.py.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as web searches and SEC filings, which creates a surface for indirect prompt injection. - Ingestion points: External data is ingested through
WebSearch,WebFetch, andget_sec_filingtools. - Boundary markers: The instructions do not specify any boundary markers or delimiters to separate untrusted external content from the agent's internal instructions.
- Capability inventory: The skill utilizes
execute_codefor Python processing and shell execution for Node.js (node) and Python-based verification scripts. - Sanitization: There are no mentioned mechanisms for sanitizing or validating the content retrieved from external web sources before it is used in the presentation generation process.- [EXTERNAL_DOWNLOADS]: The skill uses
WebSearchandWebFetchto retrieve information from general internet sources to populate segments of the company profile, such as brand colors and recent news.
Audit Metadata