paper-figures
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script depends on
pymupdfandPillow. These are standard, well-known libraries for PDF manipulation and image processing. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external PDF files. 1. Ingestion points: PDF file content is read by
scripts/extract-figures.pyusing thefitz(PyMuPDF) library. 2. Boundary markers: The script does not implement specific delimiters or 'ignore' instructions for the extracted text. 3. Capability inventory: The script performs file-write operations to save extracted images and outputs data to stdout via a JSON manifest. 4. Sanitization: Extracted caption text is truncated to 140 characters and newlines are replaced with spaces before being included in the output manifest.
Audit Metadata