skills/commandcodeai/agent-skills/pdf/Gen Agent Trust Hub

pdf

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides multiple Python scripts and command-line examples (e.g., qpdf, pdftotext) and instructs the agent to execute them for PDF document processing and manipulation tasks.- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted PDF files and JSON data, creating an entry point for embedded instructions in the processed content.
  • Ingestion points: Scripts such as scripts/extract_form_field_info.py and scripts/fill_pdf_form_with_annotations.py read user-supplied PDF files and JSON metadata.
  • Boundary markers: No specific delimiters or instructions are used to distinguish between data and prompt commands during processing.
  • Capability inventory: The skill allows for local file system read/write operations and execution of scripts via the shell.
  • Sanitization: Content processing relies on the pypdf and pdfplumber libraries, which perform parsing without explicit instruction filtering.- [DYNAMIC_EXECUTION]: The script scripts/fill_fillable_fields.py performs a runtime monkeypatch of the pypdf library's get_inherited method to fix a data handling bug when processing selection lists.- [PROMPT_INJECTION]: The forms.md file uses authoritative language such as "CRITICAL: You MUST complete these steps in order" to enforce specific behavior and override the agent's default task planning.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 08:53 PM
Security Audit — agent-trust-hub — pdf