process-faq
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided files (Excel, Word, PDF, Text) to extract content for analysis. This creates a surface for indirect prompt injection if the document content contains malicious instructions intended to subvert the AI agent's behavior during the expansion phase.\n
- Ingestion points:
scripts/convert_to_markdown.pyreads input files from the local filesystem.\n - Boundary markers: Absent; the agent reads the full output of the conversion script.\n
- Capability inventory: Access to
Bashfor running Python scripts andWritefor file creation.\n - Sanitization: Relies on standard document parsing libraries (
pandas,PyPDF2,python-docx) for text extraction.\n- [DYNAMIC_EXECUTION]: TheSKILL.mdinstructions direct the agent to generate and run temporary Python scripts to handle data transformation (e.g., converting list data to Excel usingpandas). This is a controlled use of dynamic execution based on pre-defined templates for local data manipulation.
Audit Metadata