Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes well-known and reputable PDF processing libraries including pypdf, pdfplumber, and reportlab. All external dependencies are standard packages from official registries and originate from well-known sources.
- [SAFE]: The script
scripts/fill_fillable_fields.pyimplements a runtime monkeypatch for a specific function in thepypdflibrary. This modification is documented as a necessary workaround for a library bug related to form field handling and does not pose a security risk. - [SAFE]: The skill is designed to process untrusted PDF data (indirect prompt injection surface). To mitigate risks, it includes robust validation scripts such as
check_bounding_boxes.pyand explicitly instructs the agent to perform visual verification of results, following security best practices for handling external content.
Audit Metadata