redteam-report-template
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for installing Pandoc and using it via shell commands to convert documents. These commands use reputable tools for their intended purpose.
- [DYNAMIC_EXECUTION]: The skill contains a static Python script for verifying document structure (image and paragraph counts) that is executed via a shell one-liner.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external technical findings, creating a vector for indirect prompt injection.
- Ingestion points: Technical data is entered into Subject, Observations, and Description sections of the report template.
- Boundary markers: The template relies on standard Markdown headers but does not include instructions for the AI to ignore embedded commands in the input data.
- Capability inventory: The skill utilizes shell commands (Pandoc and Python) and performs file system operations.
- Sanitization: No input validation or sanitization of the processed findings is described.
Audit Metadata