invoice-organizer
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands including
find,mkdir,cp, andmvto manage the local filesystem, create directory structures, and rename files based on extracted metadata. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes untrusted data from external sources (PDFs and image-based receipts).
- Ingestion points: Reading content from various file formats (PDF, JPG, PNG) found via the
findcommand in SKILL.md. - Boundary markers: Absent; there are no instructions to wrap extracted text in delimiters or to ignore embedded instructions within the documents.
- Capability inventory: Includes directory creation (
mkdir), file copying (cp), file moving (mv), and generating CSV files containing the extracted data. - Sanitization: Absent; the extracted text from invoices is used directly to construct filenames and populate CSV fields without validation or escaping.
Audit Metadata