nano-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the
nano-pdfpackage from the official Python Package Index (PyPI) using theuvpackage manager. - [COMMAND_EXECUTION]: The skill provides instructions to execute the
nano-pdfCLI tool to apply natural-language edits to PDF documents. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from user-provided PDF files, which constitutes a potential injection surface.
- Ingestion points: Reads content from external PDF files (e.g.,
deck.pdf) to perform text-based edits. - Boundary markers: No specific delimiters or safety instructions are defined to separate document content from agent instructions.
- Capability inventory: The skill uses a CLI tool capable of modifying local files.
- Sanitization: The skill documentation does not outline any sanitization or validation methods to detect malicious instructions hidden within PDF data or metadata.
Audit Metadata