convert-pdf
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF files provided as arguments to generate Markdown output. This creates a surface where malicious instructions embedded in a PDF could influence an agent that subsequently reads the converted Markdown.
- Ingestion points:
SKILL.md(input PDF path$1). - Boundary markers: The skill prepends YAML frontmatter (
source,pages,backend) to the output, providing some context. - Capability inventory: Bash tool (for running
pdftotextanddocling), Write tool (for saving the resulting Markdown). - Sanitization: No specific sanitization or filtering of the extracted text is performed beyond layout processing.
- [EXTERNAL_DOWNLOADS]: The skill installs the
doclingPython package if it is not already available.doclingis a well-known tool for document conversion developed by IBM Research. - [COMMAND_EXECUTION]: The skill executes shell commands using the Bash tool to run
pdftotextfor text extraction anddoclingfor complex document processing. These operations are necessary for the skill's primary function of PDF conversion.
Audit Metadata