The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The installation section contains instructions for Linux users to use sudo apt-get install to install the poppler-utils and qpdf system packages.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external PDF files for text and table extraction, creating a potential surface for indirect prompt injection attacks.
Ingestion points: Untrusted data enters the agent context through pypdf.PdfReader, pdfplumber.open, and pdf2image.convert_from_path in SKILL.md.
Boundary markers: The skill lacks explicit instructions or delimiters to notify the agent to ignore potentially malicious instructions embedded within the processed PDF content.
Capability inventory: The skill possesses file-writing capabilities across multiple scripts, including PdfWriter.write, PIL.Image.save, and pandas.DataFrame.to_excel in SKILL.md.
Sanitization: There is no evidence of sanitization, filtering, or validation performed on the text extracted from PDFs before it is used by the agent.

pdf-creator