reportlab
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard command-line instructions for verifying the library version (
python3 -c "import reportlab; print(reportlab.Version)") and installing the package using the Python package manager. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions to download and install the
reportlablibrary and its optional dependencies (renderPM,rlPyCairo) from the official Python package registry. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for generating documents based on external data, which is a common pattern for PDF generation libraries.
- Ingestion points: Data passed to helper functions in
references/patterns.md, such ascustomer_nameanditemsin the invoice generator, anddfin the DataFrame report pattern. - Boundary markers: None explicitly defined for the data inputs.
- Capability inventory: Local file writing (
c.save(),doc.build()) to create the PDF output. - Sanitization: None (standard for library usage examples).
Audit Metadata