data-extract
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses
sys.path.insertinSKILL.mdto dynamically include a shared library directory (../../scripts) at runtime. This allows the skill to load core engine components such asextract.py,dataclean.py, andingest.pywhich reside outside the skill's immediate folder. - [DYNAMIC_EXECUTION]: The skill features a reuse mechanism via the
emit_runnerfunction indataclean.py. This functionality generates standalone Python scripts and Markdown documentation cards in the user's working directory to facilitate reproducible extraction workflows. - [EXTERNAL_DOWNLOADS]: The
image_extract.pyscript performs outbound network requests to OpenAI-compatible vision API endpoints (defaulting toapi.openai.com) to process chart and diagram data. This communication is documented as a necessary step for image-based extraction and uses standard environment variables for authentication. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of untrusted document and image content.
- Ingestion points: The
image_extract.pyscript andingest.pyengine read external files including PDFs, Word documents, and various image formats. - Boundary markers: The skill employs specific prompt engineering strategies and a corrective retry mechanism in
image_extract.pyto attempt to constrain the vision model's output to valid Markdown tables. - Capability inventory: The skill has capabilities for network communication (API calls), local file reading (ingestion), and file writing (Excel and report generation).
- Sanitization: External content from vision models is parsed for Markdown table structures, providing a layer of validation against unexpected prose or instructions.
Audit Metadata