geo-report-pdf
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the 'reportlab' library, a well-known Python package, to facilitate the generation of PDF documents.
- [COMMAND_EXECUTION]: The skill executes a local Python script at '~/.claude/skills/geo/scripts/generate_pdf_report.py' using 'python3' to process JSON data and produce the final PDF output.
- [PROMPT_INJECTION]: The skill processes data from 'GEO-*.md' audit reports that may include content from analyzed external websites, presenting a risk of indirect prompt injection.
- Ingestion points: Reads markdown audit reports ('GEO-*.md') containing data scraped from external URLs.
- Boundary markers: Absent; there are no specific delimiters or instructions for the agent to ignore embedded commands in the source data.
- Capability inventory: The skill utilizes subprocess execution ('python3') to run a local script.
- Sanitization: Absent; the instructions do not specify any validation or sanitization steps for the data parsed from the markdown reports before it is passed to the PDF generation script.
Audit Metadata