specialized-document-generator
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to accept and process external data to generate documents, which creates a vulnerability surface where malicious instructions embedded in the input could influence the agent's output or code generation.
- Ingestion points: The skill explicitly mentions accepting data as input for document creation in the "Critical Rules" section.
- Boundary markers: There are no instructions to use delimiters or ignore embedded instructions within the input data.
- Capability inventory: The agent is instructed to write files (PDF, PPTX, XLSX, DOCX) to the filesystem and execute scripts using various libraries.
- Sanitization: No input validation or sanitization requirements are specified for the external data being processed.
Audit Metadata