geo-report-pdf
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'reportlab' package, a well-known and trusted library for PDF generation, from the official Python package registry.- [COMMAND_EXECUTION]: The skill executes local commands to manage temporary data files and run a Python-based PDF generation script ('generate_pdf_report.py') located within the skill's local directory structure.- [INDIRECT_PROMPT_INJECTION]: The skill processes data derived from external website audits, creating an attack surface where malicious content on a scanned site could attempt to influence the report output.
- Ingestion points: Reads and parses data from markdown audit reports (e.g., 'GEO-AUDIT-REPORT.md') derived from external URLs.
- Boundary markers: Data is parsed based on markdown headers and table structures; no explicit 'ignore instructions' delimiters are used.
- Capability inventory: Involves writing to temporary files ('/tmp/geo-audit-data.json') and executing subprocesses ('python3 generate_pdf_report.py') as defined in 'SKILL.md'.
- Sanitization: Instructions rely on the agent to correctly parse markdown into a structured JSON schema, with sanitization logic assumed to be handled within the execution of the external Python script.
Audit Metadata