invoice-organizer
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands (
find,mkdir,cp,mv) to identify, organize, and relocate files within the user's filesystem. These operations are intended for the skill's primary purpose and include human-in-the-loop confirmation before execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content extracted from external invoices and receipts, which could potentially contain malicious instructions meant to influence the agent's behavior.
- Ingestion points: Text extraction from PDF documents and OCR/text recognition from image files (JPG, PNG) as described in the instructions.
- Boundary markers: None identified; instructions do not specify delimiters to separate untrusted content from agent instructions.
- Capability inventory: File searching, directory creation, file copying, file moving, and CSV file generation via shell commands.
- Sanitization: No explicit sanitization or validation of the extracted invoice text is mentioned before it is used in filenames or summary reports.
Audit Metadata