visa-doc-translate
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
sipssystem utility to convert image formats (HEIC to PNG) based on user input. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of several external Python packages and system libraries (e.g.,
pillow,reportlab,easyocr,pytesseract,tesseract) to perform OCR and PDF generation. - [DYNAMIC_EXECUTION]: The agent is instructed to dynamically generate and execute a Python script using
PILandreportlabto create the final bilingual PDF. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text extracted via OCR from user-provided images (passports, bank statements, etc.).
- Ingestion points: Text extracted from document images in
SKILL.mdstep 3. - Boundary markers: None. The extracted text is passed directly to the translation and PDF generation steps without delimiters or instructions to ignore embedded commands.
- Capability inventory: The agent has the ability to execute shell commands (
sips), install packages (pip), and execute dynamically generated Python scripts. - Sanitization: There is no evidence of sanitization or validation of the extracted OCR text before it is used in the translation prompt or the generated Python script.
Audit Metadata