alterlab-pdf-extract
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of
markitdown(from Microsoft) and theopenaiPython client. These are standard, well-known libraries for document processing and AI interaction. - [PROMPT_INJECTION]: The
extract_llmfunction inscripts/extract_to_table.pyinterpolates document content directly into a prompt sent to an LLM. This presents a surface for indirect prompt injection if a processed document contains malicious instructions, though this is inherent to the tool's core functionality. - Ingestion points: Document text is read and converted via
markitdownin theextract_llmfunction withinscripts/extract_to_table.py. - Boundary markers: The prompt uses basic labels like
Paper ({source}):to delineate content, which provides minimal protection against adversarial content. - Capability inventory: The skill possesses the capability to read local documents, write output tables, and perform network requests to LLM providers (OpenRouter/OpenAI).
- Sanitization: No specific sanitization or escaping of the document content is performed before interpolation into the prompt.
Audit Metadata