Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and helper scripts that use subprocesses to call standard command-line utilities such as
qpdf,pdftotext,pdftk, andpdfimages. These are used for routine document manipulation tasks like merging, splitting, and OCR processing. - [REMOTE_CODE_EXECUTION]: The skill includes code snippets for various libraries like
pypdf,pdfplumber, andreportlab. All libraries and tools referenced are established industry standards for PDF handling, and no remote code execution from untrusted or unknown sources was detected. - [DATA_EXFILTRATION]: While the skill processes user-provided PDF files, there are no network operations or exfiltration patterns detected that would send document contents to external servers.
- [DYNAMIC_EXECUTION]: The script
scripts/fill_fillable_fields.pyuses a standard monkeypatching technique on thepypdflibrary to fix a known bug in selection list handling. This is a local modification for compatibility and does not involve executing external or untrusted code.
Audit Metadata