wps-office
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill reads content from external office documents which may contain malicious instructions designed to influence agent behavior. \n
- Ingestion points: Tools such as wps_excel_read_range, wps_word_get_document_text, and wps_ppt_get_slide_info import data from Excel, Word, and PPT files into the agent's context (SKILL.md). \n
- Boundary markers: The instructions do not define delimiters or specific markers to separate untrusted document content from the agent's primary instructions (SKILL.md). \n
- Capability inventory: The skill has access to 224 tools for file management, conversion, and application manipulation (SKILL.md). \n
- Sanitization: There is no description of sanitization or validation processes for the data ingested from office documents.
Audit Metadata