redteam-report-template
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Pandoc CLI to convert Markdown reports into DOCX format. This is an expected and legitimate use of shell commands for document processing.
- [DYNAMIC_EXECUTION]: A Python script is executed via the command line to verify the integrity of the generated report by counting embedded elements. The script operates exclusively on local files generated during the reporting process.
- [INDIRECT_PROMPT_INJECTION]: The skill processes finding data from external engagements into a report format.
- Ingestion points: Finding details and observations from authorized deliverables.
- Boundary markers: Uses structured Markdown headers to delineate finding sections.
- Capability inventory: Utilizes Pandoc and Python for document rendering and validation.
- Sanitization: The template provides a fixed structure but does not include explicit content sanitization instructions.
Audit Metadata