excel-pivot-wizard
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external tabular data, which creates a potential surface for indirect prompt injection attacks.
- Ingestion points: The skill instructions in
SKILL.mdspecify verifying and creating pivot tables from tabular source data provided by the user. - Boundary markers: There are no specified delimiters or explicit instructions for the agent to ignore or neutralize potentially malicious commands embedded within the input data.
- Capability inventory: The skill configuration in
SKILL.mdallows the agent to use powerful system tools includingRead,Write,Edit,Grep,Glob, and general shell command execution viaBash(cmd:*). - Sanitization: There are no documented procedures for sanitizing, validating, or escaping external content before the agent processes it.
Audit Metadata