skills/danielrosehill/claude-image-production-plugin/pdf-extract-embedded-images/Gen Agent Trust Hub
pdf-extract-embedded-images
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Uses Bash to execute
pdfimages,ls, andmkdir. These tools are used appropriately for inspecting PDF contents, creating directories, and extracting embedded image objects. - [EXTERNAL_DOWNLOADS]: Documents the installation of
poppler-utilsvia the system package manager (apt). This is a standard and trusted dependency for thepdfimagesutility. - [PROMPT_INJECTION]: The skill processes user-supplied PDF files which represents a theoretical surface for indirect prompt injection. However, the risk is minimized as the skill uses specific CLI tools for binary extraction rather than feeding untrusted text directly into the agent's context, and it follows best practices by quoting file path variables.
Audit Metadata