billing-automation
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection surface identified in resources/implementation-playbook.md. The Invoice.to_html method uses string formatting to insert customer names and addresses directly into HTML output without escaping or validation. This allows potentially malicious content in customer records to influence agent or browser behavior.\n
- Ingestion points: customer.name and customer.address attributes in resources/implementation-playbook.md.\n
- Boundary markers: None present around interpolated data.\n
- Capability inventory: Logic includes invoice generation (HTML/PDF) and automated email delivery.\n
- Sanitization: No sanitization or HTML escaping is performed on the data before interpolation.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes well-known technology services and libraries, including the stripe and reportlab Python packages, for payment processing and document generation.
Audit Metadata