extract-document-data
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to read local files, which may contain sensitive personal or financial information (e.g., payslips, invoices, contracts), and upload them to an external endpoint (
https://www.stipple.sh/v1/extract). This behavior represents a significant data exposure risk, although it is the core functionality of the skill and is explicitly documented with safety warnings. - [COMMAND_EXECUTION]: The instructions guide the agent to use
curlfor performing network operations and transmitting file contents to an external server. This pattern of execution allows the agent to send local data to non-whitelisted domains.
Audit Metadata