invoice-organizer
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading content from user-supplied invoices and receipts (PDFs and images).
- Ingestion points: File content from PDFs, JPGs, and PNGs identified via the find command.
- Boundary markers: The instructions define specific search terms for data extraction (e.g., 'Invoice Date:', 'Amount:') but do not use explicit delimiters to isolate external content from instructions.
- Capability inventory: Limited to local file system operations (find, mkdir, cp, mv) and writing a local CSV file. It lacks network access or arbitrary code execution tools.
- Sanitization: Standardizes filenames by removing special characters and formatting dates, which reduces the risk of filesystem-based injection.
Audit Metadata