convert-pdf-to-markdown
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a shell script located at
${CLAUDE_PLUGIN_ROOT}/scripts/pdf-to-markdown.shto handle the conversion process. - [DATA_EXFILTRATION]: The conversion process involves transmitting the contents of PDF files to an external endpoint referred to as the "AI26 backoffice conversion service."
- [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by processing external PDF files and returning the resulting markdown content to the agent context.
- Ingestion points: PDF files are read and processed by the
pdf-to-markdown.shscript. - Boundary markers: The instructions do not specify the use of delimiters or clear markers to separate the converted content from the agent's internal instructions.
- Capability inventory: The skill uses shell script execution capabilities to run the conversion logic.
- Sanitization: There is no evidence of content sanitization, filtering, or validation performed on the PDF data before it is sent to the external service or after the markdown is extracted.
Audit Metadata