Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents and utilizes various standard command-line utilities for PDF and image manipulation, including
qpdf,pdftotext,pdftk, and ImageMagick (magick).These are used for legitimate file processing tasks as described in the documentation. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing well-known third-party libraries from official package registries (e.g.,
pip install pypdf pdfplumber). These dependencies are standard tools in the PDF processing ecosystem. - [DATA_EXFILTRATION]: No unauthorized network operations or data exfiltration patterns were detected. The skill operates on local PDF files provided by the user.
- [SAFE]: No malicious patterns such as obfuscation, persistence, or privilege escalation were found. The dynamic code modification (monkeypatching) in
scripts/fill_fillable_fields.pyis a benign adjustment to handle internal library data structures correctly during form filling.
Audit Metadata