convert-pdf

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF files provided as arguments to generate Markdown output. This creates a surface where malicious instructions embedded in a PDF could influence an agent that subsequently reads the converted Markdown.
  • Ingestion points: SKILL.md (input PDF path $1).
  • Boundary markers: The skill prepends YAML frontmatter (source, pages, backend) to the output, providing some context.
  • Capability inventory: Bash tool (for running pdftotext and docling), Write tool (for saving the resulting Markdown).
  • Sanitization: No specific sanitization or filtering of the extracted text is performed beyond layout processing.
  • [EXTERNAL_DOWNLOADS]: The skill installs the docling Python package if it is not already available. docling is a well-known tool for document conversion developed by IBM Research.
  • [COMMAND_EXECUTION]: The skill executes shell commands using the Bash tool to run pdftotext for text extraction and docling for complex document processing. These operations are necessary for the skill's primary function of PDF conversion.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 05:10 PM