nano-pdf
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscated content, or unauthorized data access were detected. The skill's behavior is consistent with its stated purpose of document editing.- [COMMAND_EXECUTION]: The skill uses the nano-pdf command-line tool to apply changes to PDF files. This execution is the primary function of the skill and does not involve suspicious privilege escalation.- [PROMPT_INJECTION]: The skill creates an indirect prompt injection surface by processing natural language instructions for PDF modification. 1. Ingestion points: Natural language instruction argument in SKILL.md. 2. Boundary markers: Shell quoting is used for arguments. 3. Capability inventory: PDF file modification via the nano-pdf CLI (SKILL.md). 4. Sanitization: No explicit input sanitization is documented within the skill file.
Audit Metadata