invoice-organizer

The skill instructs the agent to execute shell commands (`mkdir`, `cp`, `mv`) where arguments, such as directory names and filenames, are constructed from extracted invoice details (vendor, product description, date). These details originate from untrusted sources (invoice content, user input). If these extracted strings are not rigorously shell-escaped before being passed to these commands, a malicious string (e.g., 'VendorName; rm -rf /') could lead to arbitrary command execution on the host system. While the skill includes an instruction to 'Remove special characters except hyphens' for filenames, this is a guideline for the LLM and not an enforced security mechanism, making it vulnerable to LLM errors or sophisticated bypass attempts.