pdf-sign
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided PDF documents to identify text anchors for content placement, which is a common attack surface for document-processing tools. \n
- Ingestion points: The skill reads PDF content using
pymupdf.open()andpage.get_textpage_ocr()as described inSKILL.md. \n - Boundary markers: No specific delimiters or safety instructions are provided to the agent to ignore potentially malicious embedded text. \n
- Capability inventory: The skill utilizes file writing and document modification via the
pymupdflibrary. \n - Sanitization: No sanitization of text labels found within the PDF is performed before using their coordinates. \n- [EXTERNAL_DOWNLOADS]: The skill requires standard installations of the
pymupdfandpillowPython packages and thetesseractOCR engine, all of which are established tools for these tasks. \n- [COMMAND_EXECUTION]: The skill provides commands for environment setup, includingpip installfor Python dependencies andbrew installfor system tools like Tesseract.
Audit Metadata