pdf-zine
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
pdf2zineshell script from the author's GitHub repository (github.com/eins78/pdf2zine). It also references an external source for buildingbookletimposerfrom source (git.codecoop.org/kjo/bookletimposer). - [COMMAND_EXECUTION]: Executes shell commands to install and run the PDF manipulation tool, including
chmod +xto grant execution permissions to the downloaded script. - [PRIVILEGE_ESCALATION]: Includes instructions to use
sudo apt installfor installing thebookletimposerdependency on Debian-based systems. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF files using command-line tools, creating a surface where malicious content in a PDF could potentially exploit the underlying parser.
- Ingestion points: Processes PDF files provided as input to the
pdf2zineorbookletimposercommands (mentioned inSKILL.mdandreferences/bookletimposer-native.md). - Boundary markers: Absent; there are no instructions to the agent to ignore embedded content or use specific delimiters.
- Capability inventory: Includes file read/write access and CLI tool execution (
qpdf,bookletimposer,pdf2zine) as described inSKILL.mdandreferences/bookletimposer-native.md. - Sanitization: Absent; the skill does not specify any validation or sanitization of the PDF content prior to processing.
Audit Metadata