Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill includes instructions to use 'sudo' for installing system-level dependencies ('sudo apt-get install -y poppler-utils'), which requires elevated access.
- [COMMAND_EXECUTION]: The skill employs shell commands for PDF processing ('pdftoppm') and utilizes system package managers ('pip', 'brew', 'apt-get').
- [INDIRECT_PROMPT_INJECTION]: Reading external PDF files introduces a vulnerability surface where the agent could be influenced by instructions embedded within those files.
- Ingestion points: The agent reads PDF content using 'pdfplumber' or 'pypdf' (SKILL.md).
- Boundary markers: Absent; no delimiters are used to separate document content from agent instructions.
- Capability inventory: The skill can execute shell commands and install software.
- Sanitization: Absent; no filtering is applied to the extracted text.
Audit Metadata