dropbox-automation

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted data from Dropbox, which creates a potential surface for indirect prompt injection.
  • Ingestion points: Data enters the context from file contents via DROPBOX_READ_FILE and from filenames or metadata via DROPBOX_SEARCH_FILE_OR_FOLDER as described in SKILL.md.
  • Boundary markers: There are no explicit instructions to use delimiters or ignore embedded commands within the files being processed.
  • Capability inventory: The skill has access to tools with significant impact, such as DROPBOX_DELETE_FILE_OR_FOLDER, DROPBOX_MOVE_FILE_OR_FOLDER, and DROPBOX_UPLOAD_FILE.
  • Sanitization: The skill does not provide mechanisms for validating or sanitizing the content retrieved from Dropbox before processing it.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 04:24 PM
Security Audit — agent-trust-hub — dropbox-automation