invoice-organizer

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or unauthorized behaviors were detected. The skill's operations are localized to the user's filesystem.
  • [COMMAND_EXECUTION]: Employs standard shell utilities including find, mkdir, cp, and mv to identify and organize invoice files. These operations are consistent with the skill's stated purpose of document management.
  • [PROMPT_INJECTION]: The skill extracts text from potentially untrusted external files (invoices and receipts), which constitutes an indirect prompt injection attack surface.
  • Ingestion points: Local PDF and image files processed during information extraction (SKILL.md).
  • Boundary markers: The instructions do not define specific delimiters to separate extracted text from the agent's internal reasoning.
  • Capability inventory: File system management tools such as find, mkdir, cp, and mv (SKILL.md).
  • Sanitization: The skill does not specify procedures for sanitizing or validating the content extracted from processed documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 03:20 PM
Security Audit — agent-trust-hub — invoice-organizer