poffice-office-craft
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation describes the use of specialized binaries (
wordcraft-cli,gridcraft-cli,deckcraft-cli,pdfcraft-cli) for headless document processing. These are core components of the Poffice platform integration.\n- [DATA_EXFILTRATION]: The Python script and instructions involve transmitting document data and API tokens to the vendor's domains (office.poffice.online and workspace.poffice.online). This behavior is expected for the skill's purpose of managing cloud documents.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data by reading local files and accepting user-supplied JSON data for PowerPoint generation.\n - Ingestion points:
scripts/poffice_office.pyreads local files for upload and accepts JSON slide definitions from CLI arguments.\n - Boundary markers: No explicit prompt delimiters or 'ignore' instructions are used for external data processing.\n
- Capability inventory: The skill performs file system reads/writes, network requests via the
requestslibrary, and interacts with local CLI tools.\n - Sanitization: The Python script uses standard JSON parsing (
json.loads) to validate structured input data.
Audit Metadata