pdf-extract-embedded-images

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Uses Bash to execute pdfimages, ls, and mkdir. These tools are used appropriately for inspecting PDF contents, creating directories, and extracting embedded image objects.
  • [EXTERNAL_DOWNLOADS]: Documents the installation of poppler-utils via the system package manager (apt). This is a standard and trusted dependency for the pdfimages utility.
  • [PROMPT_INJECTION]: The skill processes user-supplied PDF files which represents a theoretical surface for indirect prompt injection. However, the risk is minimized as the skill uses specific CLI tools for binary extraction rather than feeding untrusted text directly into the agent's context, and it follows best practices by quoting file path variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 06:24 PM
Security Audit — agent-trust-hub — pdf-extract-embedded-images