pdftotext
Fail
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several system command operations:
- The installation script
scripts/install.ps1executessudo apt-getto perform administrative package management, which constitutes privilege escalation. - Various scripts and documentation files (
SKILL.md,references/cheatsheet.md) provide instructions for executing thepdftotextbinary and system utilities likechmodandls. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and process content from external PDF documents.
- Ingestion points: Content extracted from PDF files via
pdftotextis passed to the agent context. - Boundary markers: Absent. The instructions do not define delimiters or provide guidance to ignore instructions embedded within the document content.
- Capability inventory: The skill can execute shell commands via
scripts/install.shandscripts/install.ps1, and perform file system operations. - Sanitization: Absent. The raw text output from the PDF is processed without filtering or validation.
- [EXTERNAL_DOWNLOADS]: The skill's installation scripts (
scripts/install.shandscripts/install.ps1) facilitate the download of thepdftotextutility from official operating system package repositories, including Homebrew, APT, DNF, Pacman, and APK.
Recommendations
- AI detected serious security threats
Audit Metadata