excel-pivot-wizard
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external tabular data while the environment permits access to file system and shell tools, representing a surface for indirect prompt injection.
- Ingestion points: Tabular data files and data ranges referenced in the pivot table creation instructions (SKILL.md).
- Boundary markers: Absent; the instructions do not provide specific delimiters or ignore-instructions guidance to the agent for handling data content.
- Capability inventory: The agent has access to Read, Write, Edit, Grep, Glob, and Bash tools as defined in the skill's frontmatter (SKILL.md).
- Sanitization: Absent; there are no instructions for validating or sanitizing the input data before processing.
Audit Metadata