pdf-to-markdown
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is well-structured for its stated purpose of document processing. It uses standard Node.js patterns and established dependencies.
- [EXTERNAL_DOWNLOADS]: The skill uses Tesseract.js for OCR, which may download language data files (approximately 15MB) from official repositories during initial setup. This behavior is clearly documented in the SKILL.md and is standard for the library.
- [PROMPT_INJECTION]: The instructions contain protocols for environment compatibility (e.g., ignoring platform-specific mode switches) and execution consistency. These are intended to maintain agent state across different environments and do not attempt to bypass safety filters or core AI guidelines.
- [COMMAND_EXECUTION]: The skill implements a command-line interface via Node.js for local file conversion. The command arguments are parsed and validated correctly within the scripts.
- [DATA_EXFILTRATION]: No patterns associated with credential theft or unauthorized data transmission were found. The skill processes files locally and outputs results as JSON or markdown files.
Audit Metadata