pdf-to-markdown
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data (PDF files) which could contain embedded instructions intended to influence agent behavior.
- Ingestion points: The script
scripts/pdf_to_markdown.pyreads content from user-specified PDF files using thepymupdf4llmlibrary. - Boundary markers: The extracted text is output directly to the agent without specific delimiters or markers to distinguish untrusted content from system instructions.
- Capability inventory: The skill possesses the ability to read and write files on the local filesystem as directed by the user.
- Sanitization: No explicit sanitization or filtering of extracted text is performed within the scripts.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
uvpackage manager to automatically retrieve necessary dependencies at runtime. - Evidence: Usage of
uv run --with pymupdf4llmanduv run --with pymupdfinSKILL.mdensures required libraries are available. - Context: These references target well-known libraries on the official Python Package Index (PyPI) for PDF processing tasks.
Audit Metadata