skill-doc-delivery
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the document-skills plugin from a trusted organization source. This is a standard extension of the platform environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes markdown files from the local results directory, creating a surface for potential indirect prompt injection if those files contain untrusted data.\n
- Ingestion points: File reads from the local output directory via shell commands in
SKILL.md.\n - Boundary markers: None identified in the provided instructions.\n
- Capability inventory: Restricted to basic file management commands (ls, cat, grep); core conversion tasks are handled by separate trusted plugins.\n
- Sanitization: No content validation is described for the input files.
Audit Metadata