nutrient-document-processing
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill facilitates document processing using Nutrient, a well-known document technology service. All network requests are directed to the service's official API domain (
api.nutrient.io). - [EXTERNAL_DOWNLOADS]: The skill documentation includes an MCP server configuration that utilizes
npxto download and execute the@nutrient-sdk/dws-mcp-serverpackage from the official NPM registry. - [COMMAND_EXECUTION]: The skill provides multiple
curlcommand templates for processing documents. These commands are standard for API interaction and include placeholders for the user's API key. - [PROMPT_INJECTION]: The skill processes untrusted document data (PDF, DOCX, images) through OCR and text extraction tools. While this creates a surface for indirect prompt injection, it is the primary intended function of the skill and no exploitable capability chain was identified.
Audit Metadata