skills/eins78/agent-skills/pdf-zine/Gen Agent Trust Hub

pdf-zine

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the pdf2zine shell script from the author's GitHub repository (github.com/eins78/pdf2zine). It also references an external source for building bookletimposer from source (git.codecoop.org/kjo/bookletimposer).
  • [COMMAND_EXECUTION]: Executes shell commands to install and run the PDF manipulation tool, including chmod +x to grant execution permissions to the downloaded script.
  • [PRIVILEGE_ESCALATION]: Includes instructions to use sudo apt install for installing the bookletimposer dependency on Debian-based systems.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF files using command-line tools, creating a surface where malicious content in a PDF could potentially exploit the underlying parser.
  • Ingestion points: Processes PDF files provided as input to the pdf2zine or bookletimposer commands (mentioned in SKILL.md and references/bookletimposer-native.md).
  • Boundary markers: Absent; there are no instructions to the agent to ignore embedded content or use specific delimiters.
  • Capability inventory: Includes file read/write access and CLI tool execution (qpdf, bookletimposer, pdf2zine) as described in SKILL.md and references/bookletimposer-native.md.
  • Sanitization: Absent; the skill does not specify any validation or sanitization of the PDF content prior to processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:53 PM