make-integration
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
makeclibinary from the author's repository via Homebrew and includes an update mechanism viamakecli update. - [COMMAND_EXECUTION]: Shell commands are utilized for OCR operations, configuration verification, and credential management. It also documents the use of the
!commandsyntax for interactive token setup. - [DATA_EXFILTRATION]: User-provided document files are uploaded to the configured service URL for recognition and processing.
- [PROMPT_INJECTION]: The skill processes untrusted external files, creating an indirect prompt injection surface.
- Ingestion points: Extracts data from user-provided
.pdf,.ofd,.png,.jpg, and.jpegfiles usingmakecli(SKILL.md). - Boundary markers: Lacks explicit instructions for the agent to ignore instructions embedded within the invoice/bill content during extraction.
- Capability inventory: Includes shell command execution and recording operations via
makecli(SKILL.md). - Sanitization: No explicit sanitization or validation of extracted OCR results is performed before they are processed by the agent.
Audit Metadata