pdf-to-markdown

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements PDF-to-Markdown conversion using reputable open-source dependencies including @opendocsg/pdf2md, pdfjs-dist, and tesseract.js. The logic is transparent and focused on the stated task.
  • [INDIRECT_PROMPT_INJECTION]: As a document processing utility, this skill ingests untrusted PDF content which may contain instructions intended to influence the behavior of the agent reading the resulting Markdown. This is a characteristic of the tool's intended use-case.
  • Ingestion points: Input PDF files are read using fs.readFileSync in scripts/lib/converter.cjs.
  • Boundary markers: The skill does not currently implement specific delimiters or 'ignore' instructions for the converted output.
  • Capability inventory: The skill has filesystem write capabilities via fs.writeFileSync to save converted files.
  • Sanitization: No specific content sanitization is performed on the extracted text beyond the conversion process itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 02:33 PM
Security Audit — agent-trust-hub — pdf-to-markdown