pdftotext

Fail

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs several system command operations:
  • The installation script scripts/install.ps1 executes sudo apt-get to perform administrative package management, which constitutes privilege escalation.
  • Various scripts and documentation files (SKILL.md, references/cheatsheet.md) provide instructions for executing the pdftotext binary and system utilities like chmod and ls.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and process content from external PDF documents.
  • Ingestion points: Content extracted from PDF files via pdftotext is passed to the agent context.
  • Boundary markers: Absent. The instructions do not define delimiters or provide guidance to ignore instructions embedded within the document content.
  • Capability inventory: The skill can execute shell commands via scripts/install.sh and scripts/install.ps1, and perform file system operations.
  • Sanitization: Absent. The raw text output from the PDF is processed without filtering or validation.
  • [EXTERNAL_DOWNLOADS]: The skill's installation scripts (scripts/install.sh and scripts/install.ps1) facilitate the download of the pdftotext utility from official operating system package repositories, including Homebrew, APT, DNF, Pacman, and APK.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — pdftotext