Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for PDF processing, containing benign code snippets and shell commands for document manipulation.
- [EXTERNAL_DOWNLOADS]: Mentions standard, widely-used Python libraries including pypdf, pdfplumber, pandas, reportlab, pytesseract, and pdf2image. These are recognized dependencies for the skill's stated purpose.
- [COMMAND_EXECUTION]: Includes instructional examples for common system utilities such as pdftotext, qpdf, and pdftk. These examples are consistent with the skill's functionality as a document toolkit.
- [PROMPT_INJECTION]: The skill identifies surfaces for indirect prompt injection through the processing of untrusted PDF files.
- Ingestion points: Reading PDF documents via pypdf and pdfplumber in SKILL.md.
- Boundary markers: None defined in the provided code snippets.
- Capability inventory: File system read/write access and execution of local CLI tools.
- Sanitization: Not explicitly demonstrated in the instructional examples.
Audit Metadata