adonis-attachment-variants
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer documentation for the @jrmc/adonis-attachment package, including configuration for image, video, and PDF processing.
- [COMMAND_EXECUTION]: The skill describes the use of system binaries (ffmpeg, poppler, LibreOffice) for file conversion. It provides standard configuration fields for binary paths to support different environments.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted files (images, documents, videos) to generate thumbnails. While this involves data ingestion and capability to run subprocesses, it represents the primary, documented purpose of the library. 1. Ingestion points: File attachments (images, PDFs, videos) processed via converters. 2. Boundary markers: Managed by the underlying library logic. 3. Capability inventory: Spawns subprocesses for conversion; writes files to storage paths. 4. Sanitization: Relies on the security of sharp, ffmpeg, and other binaries.
Audit Metadata