pdf-converter
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied documents, creating an indirect prompt injection surface.
- Ingestion points: Document conversion inputs (PDF, Word, etc.) processed in the SKILL.md workflow.
- Boundary markers: Absent.
- Capability inventory: Preparation of API requests for document tasks.
- Sanitization: Not specified.
- [DATA_EXFILTRATION]: The skill utilizes a local file named api_key to store and retrieve credentials for the ComPDF service. This behavior is documented as a standard runtime state management practice for the vendor and includes specific instructions to the agent to avoid leaking the key in logs or user-facing output.
Audit Metadata