daily-report-format
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script for converting reports to PDF format using LibreOffice. Evidence: The command 'python3 {scripts_path}/office/soffice.py --headless --convert-to pdf {docx_path}' is specified in SKILL.md.
- [EXTERNAL_DOWNLOADS]: The skill requires the 'docx' npm package to generate Microsoft Word files.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its processing of external inputs and project data. Ingestion points: User-supplied narratives and multiple project data files like 'project-config.json' and 'plans-spatial.json'. Boundary markers: None specified in the provided files to separate instructions from data. Capability inventory: Writing files to the local directory and executing shell commands for document conversion. Sanitization: No explicit validation or sanitization of external data is defined before the content is processed by the language model.
Audit Metadata