Fail
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in
SKILL.mdinclude the use ofsudofor system package installation. - Evidence:
sudo apt-get install -y poppler-utils\n- [COMMAND_EXECUTION]: The skill uses shell commands for dependency installation and document rendering. - Evidence:
pdftoppm -png $INPUT_PDF $OUTPUT_PREFIX,uv pip install reportlab pdfplumber pypdf\n- [EXTERNAL_DOWNLOADS]: The skill fetches standard PDF processing libraries and utilities from official repositories. - Evidence:
reportlab,pdfplumber,pypdfvia pip;poppler-utilsvia apt/brew.\n- [PROMPT_INJECTION]: The skill processes untrusted PDF files, creating an attack surface for indirect prompt injection. - Ingestion points:
SKILL.md(viapdfplumber,pypdf,pdftoppm). - Boundary markers: Absent. No delimiting or 'ignore instructions' warnings provided for processed content.
- Capability inventory: Shell command execution (
pdftoppm) and package management (pip,apt). - Sanitization: Absent.
Recommendations
- AI detected serious security threats
Audit Metadata