invoice-organizer
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or unauthorized behaviors were detected. The skill's operations are localized to the user's filesystem.
- [COMMAND_EXECUTION]: Employs standard shell utilities including
find,mkdir,cp, andmvto identify and organize invoice files. These operations are consistent with the skill's stated purpose of document management. - [PROMPT_INJECTION]: The skill extracts text from potentially untrusted external files (invoices and receipts), which constitutes an indirect prompt injection attack surface.
- Ingestion points: Local PDF and image files processed during information extraction (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters to separate extracted text from the agent's internal reasoning.
- Capability inventory: File system management tools such as
find,mkdir,cp, andmv(SKILL.md). - Sanitization: The skill does not specify procedures for sanitizing or validating the content extracted from processed documents.
Audit Metadata