specialist-support-document-generator
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains a potential surface for indirect prompt injection as it interpolates user input into a subagent's system prompt.
- Ingestion points: The variable '{the user's question}' in the Agent tool call within SKILL.md.
- Boundary markers: None present; user input is directly interpolated without delimiters.
- Capability inventory: The subagent is instructed to use Python libraries (reportlab, python-docx, openpyxl) to generate documents, which involves code-based tool execution.
- Sanitization: No explicit sanitization or input validation is performed in the template instructions.
Audit Metadata