devexpress-office-file-api-pdf-new
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to process, search, and import data from external PDF documents and XML files (e.g., AcroForm data, ZUGFeRD invoices). If these files contain adversarial instructions, they could potentially influence the agent's reasoning or output when analyzing or transforming the document content.
- Ingestion points:
PdfDocumentconstructors andImportFormDatamethods inSKILL.md,references/getting-started.md, andreferences/form-fields.md. - Boundary markers: The skill advises the agent to confirm the target framework and CTP acknowledgement with the user before generating code, which acts as a manual verification step.
- Capability inventory: The skill facilitates file system read/write operations and cross-platform printing.
- Sanitization: No specific sanitization or explicit instruction delimiters for the content of processed PDF or XML files are described.
- [PRIVILEGE_ESCALATION]: The installation instructions for Linux and Docker environments include commands using
sudoto install necessary system font libraries. While these are standard environment setup tasks, they involve the use of administrative privileges. - Evidence:
sudo apt-get install -y libc6 libicu-dev libfontconfig1andsudo yum install -y glibc-devel libicu fontconfiginSKILL.md.
Audit Metadata