nutrient-document-processing
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the
@nutrient-sdk/dws-mcp-serverpackage from NPM usingnpx. This is an official integration tool provided by the service vendor for Model Context Protocol support. - [COMMAND_EXECUTION]: Uses
curlto interact with the Nutrient API for processing documents. This involves reading local files and writing the processed results back to disk as part of the intended workflow. - [DATA_EXFILTRATION]: Transmits document content to the
api.nutrient.iodomain for processing. While this involves sending data to a remote endpoint, it is the primary function of the skill and targets the official infrastructure of a well-known service provider. - [PROMPT_INJECTION]: The skill processes external data (PDFs, images, DOCX) which serves as a surface for indirect prompt injection (Category 8). Instructions hidden within processed documents could potentially influence agent behavior.
- Ingestion points: Documents uploaded via
curlinSKILL.md. - Boundary markers: Absent; the skill does not wrap document content in specific delimiters.
- Capability inventory: Includes network access (via
curl) and local file system access (read/write). - Sanitization: No content sanitization or instruction-filtering is applied to the documents before they are processed.
Audit Metadata