PDF Compress
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external PDF documents provided by users, which represents a potential attack surface for indirect prompt injection if a malicious file contains instructions designed to influence the agent.
- Ingestion points: PDF files processed through the
compress_pdftool as described inSKILL.md. - Boundary markers: None identified. The skill does not specify delimiters or safety instructions to prevent the agent from obeying instructions embedded within the processed PDF content.
- Capability inventory: Includes file system interaction via the
compress_pdftool within theoffice-mcpserver. - Sanitization: No explicit sanitization or content validation for the input PDF files is mentioned in the skill definition.
Audit Metadata