dropbox-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from Dropbox, which creates a potential surface for indirect prompt injection.
- Ingestion points: Data enters the context from file contents via
DROPBOX_READ_FILEand from filenames or metadata viaDROPBOX_SEARCH_FILE_OR_FOLDERas described in SKILL.md. - Boundary markers: There are no explicit instructions to use delimiters or ignore embedded commands within the files being processed.
- Capability inventory: The skill has access to tools with significant impact, such as
DROPBOX_DELETE_FILE_OR_FOLDER,DROPBOX_MOVE_FILE_OR_FOLDER, andDROPBOX_UPLOAD_FILE. - Sanitization: The skill does not provide mechanisms for validating or sanitizing the content retrieved from Dropbox before processing it.
Audit Metadata