reportlab

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard command-line instructions for verifying the library version (python3 -c "import reportlab; print(reportlab.Version)") and installing the package using the Python package manager.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions to download and install the reportlab library and its optional dependencies (renderPM, rlPyCairo) from the official Python package registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for generating documents based on external data, which is a common pattern for PDF generation libraries.
  • Ingestion points: Data passed to helper functions in references/patterns.md, such as customer_name and items in the invoice generator, and df in the DataFrame report pattern.
  • Boundary markers: None explicitly defined for the data inputs.
  • Capability inventory: Local file writing (c.save(), doc.build()) to create the PDF output.
  • Sanitization: None (standard for library usage examples).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:18 PM