paper-delivery-summary
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs deterministic string processing with robust input validation to generate paper delivery summaries.
- [PROMPT_INJECTION]: The skill explicitly disables model invocation (
disable-model-invocation: true), which prevents direct prompt injection attacks. Furthermore, its logic is entirely deterministic and does not rely on LLM interpretation of user inputs. - [COMMAND_EXECUTION]: Analysis of the Python script reveals no use of subprocesses, shell commands, or dynamic code execution (e.g., eval/exec). All processing is handled through standard string manipulation and regular expressions.
- [DATA_EXFILTRATION]: The skill does not perform any network operations or file system writes. It validates that provided PDF paths are absolute but does not attempt to open or read the files at those paths.
- [EXTERNAL_DOWNLOADS]: The skill relies solely on the Python standard library and contains no external dependencies or remote code fetch patterns.
Audit Metadata