invoice-organizer
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell utilities (
find,mkdir,cp,mv) to manage local files. These operations are restricted to the local filesystem and serve the intended purpose of document organization. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it reads text from untrusted external files (PDFs and images).
- Ingestion points: Data is extracted from user-supplied invoice and receipt files (SKILL.md).
- Boundary markers: None are explicitly used when processing extracted text content.
- Capability inventory: File system modification via
mkdir,cp, andmvcommands. - Sanitization: The skill provides instructions to 'Remove special characters except hyphens' during filename generation, mitigating potential command injection risks from malicious file content.
Audit Metadata