gst-invoice-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
invoice-generator.pyscript constructs HTML invoices by directly interpolating data into an f-string without any escaping or sanitization. - Ingestion points: Data provided for
RECIPIENT(name, address) andLINE_ITEMS(description) inscripts/invoice-generator.pyacts as the injection vector. - Boundary markers: There are no markers or instructions to treat the input as data rather than code/structure within the HTML generation logic.
- Capability inventory: The script includes file-writing capabilities, saving the resulting HTML to the
/mnt/user-data/outputsdirectory viaopen().write(). - Sanitization: None. Values like
item['desc'],RECIPIENT['name'], andRECIPIENT['address']are placed directly into the HTML body. This allows for potential HTML/JavaScript injection if a user provides input containing malicious tags, which would then execute in a browser environment when the invoice is viewed or printed.
Audit Metadata