pdf-to-markdown
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements PDF-to-Markdown conversion using reputable open-source dependencies including
@opendocsg/pdf2md,pdfjs-dist, andtesseract.js. The logic is transparent and focused on the stated task. - [INDIRECT_PROMPT_INJECTION]: As a document processing utility, this skill ingests untrusted PDF content which may contain instructions intended to influence the behavior of the agent reading the resulting Markdown. This is a characteristic of the tool's intended use-case.
- Ingestion points: Input PDF files are read using
fs.readFileSyncinscripts/lib/converter.cjs. - Boundary markers: The skill does not currently implement specific delimiters or 'ignore' instructions for the converted output.
- Capability inventory: The skill has filesystem write capabilities via
fs.writeFileSyncto save converted files. - Sanitization: No specific content sanitization is performed on the extracted text beyond the conversion process itself.
Audit Metadata