pdf-custom
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and documentation leverage several command-line utilities for PDF manipulation, specifically qpdf, pdftk, and poppler-utils (including pdftotext and pdfimages). These tools are used for document-level operations such as merging files, rotating pages, and extracting assets.
- [EXTERNAL_DOWNLOADS]: The skill depends on standard, well-known libraries for its functionality. Python dependencies include pypdf, pdfplumber, pandas, reportlab, pytesseract, and pdf2image. For JavaScript environments, the use of pdf-lib is documented for form-filling tasks.
- [PROMPT_INJECTION]: As a tool designed to ingest and extract data from external PDF documents, the skill possesses an indirect prompt injection surface. Content within processed PDFs (text, metadata, or OCR results) could potentially contain instructions intended to influence the agent's behavior.
- Ingestion points: Processes user-provided PDF files via pypdf, pdfplumber, and pytesseract.
- Boundary markers: None explicitly defined in the provided snippets to isolate extracted content from agent instructions.
- Capability inventory: File system read/write access and shell command execution via subprocesses.
- Sanitization: No specific sanitization or validation logic is present for the text extracted from documents.
Audit Metadata