add-pdf-report
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Environment Validation Commands]: The skill uses
bashandnodeto verify that the project structure is valid and that required dependencies (expo-print) are already installed. These checks are read-only and prevent the skill from making unauthorized changes to the project configuration or installing unknown packages. - [Output Encoding for PDF Generation]: The skill includes an
escapePdfHtmlfunction that sanitizes dynamic content before it is interpolated into the HTML template used for PDF generation. This helps protect against potential HTML injection within the generated document. - [Restricted Tool Usage]: The skill is configured with
disable-model-invocation: true, which restricts the LLM from making autonomous decisions during execution. It relies on a pre-defined implementation pattern, reducing the risk of unexpected behavior. - [Data Management]: For PDF uploads to Dataverse, the skill follows standard patterns for handling file data, ensuring that sensitive file bytes are not included in standard JSON update payloads and instead using specialized upload services.
Audit Metadata