billing-automation
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains instructional Python code for billing automation. No malicious patterns such as prompt injection, data exfiltration, or unauthorized command execution were found.
- [EXTERNAL_DOWNLOADS]: The code snippets reference the 'stripe' and 'reportlab' libraries. These are standard, well-known packages used for payment processing and PDF generation.
- [INDIRECT_PROMPT_INJECTION]: The 'to_html' method in the 'Invoice' class demonstrates an interpolation surface where customer data is inserted into an HTML template. 1. Ingestion points: 'customer.name' and 'customer.address' variables within the 'to_html' method in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: None (educational code snippets). 4. Sanitization: Absent (uses Python's '.format()' method). This represents a vulnerability surface in the provided example code but is not a malicious finding for the skill itself.
Audit Metadata