nano-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill metadata specifies the installation of the nano-pdf package from the official PyPI registry using the uv installer.
- [COMMAND_EXECUTION]: The skill body provides instructions for executing the nano-pdf command-line interface to modify local PDF documents.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external PDF files which could contain embedded instructions intended to manipulate the agent's behavior. 1. Ingestion points: PDF files (e.g., deck.pdf) provided as inputs to the command-line tool. 2. Boundary markers: Absent; instructions do not advise on using delimiters for external content. 3. Capability inventory: The skill utilizes CLI execution capabilities to perform edits. 4. Sanitization: No sanitization or validation of the input PDF content or instruction strings is provided.
Audit Metadata