pdf

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes well-known and reputable PDF processing libraries including pypdf, pdfplumber, and reportlab. All external dependencies are standard packages from official registries and originate from well-known sources.
  • [SAFE]: The script scripts/fill_fillable_fields.py implements a runtime monkeypatch for a specific function in the pypdf library. This modification is documented as a necessary workaround for a library bug related to form field handling and does not pose a security risk.
  • [SAFE]: The skill is designed to process untrusted PDF data (indirect prompt injection surface). To mitigate risks, it includes robust validation scripts such as check_bounding_boxes.py and explicitly instructs the agent to perform visual verification of results, following security best practices for handling external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 06:11 PM
Security Audit — agent-trust-hub — pdf