document-generator
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data to generate documents, which creates a surface for indirect prompt injection if the input data contains instructions intended to influence the agent's behavior during the generation process.
- Ingestion points: User-supplied data and content used to populate document templates (SKILL.md).
- Boundary markers: Absent; the instructions do not include specific delimiters or warnings to ignore instructions embedded within the provided data.
- Capability inventory: The agent is instructed to write and execute code using libraries like puppeteer and python-docx, involving file system access to generate the output documents (SKILL.md).
- Sanitization: Absent; the skill does not specify sanitization or validation routines for the input data before processing it through document engines.
Audit Metadata