solo-pdf-print

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill provides instructions for setting the DYLD_FALLBACK_LIBRARY_PATH environment variable. This is a common and legitimate troubleshooting step for macOS users to ensure the weasyprint library can locate its system dependencies (like libgobject). The suggested path (/opt/homebrew/lib) is the standard, trusted location for Homebrew libraries on modern Apple Silicon Macs.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes workflows for processing external data (HTML and Markdown files) into PDFs, which introduces a potential surface for indirect prompt injection.
  • Ingestion points: The skill references processing files such as out.html and Markdown files provided via CLI arguments (FILE1.md).
  • Boundary markers: No explicit boundary markers or sanitization logic are provided in the code templates.
  • Capability inventory: The skill uses the Bash, Read, Write, and Edit tools to manage files and execute Python scripts that perform document conversion.
  • Sanitization: There is no evidence of sanitization for the input data. However, this processing is inherent to the skill's primary function as a document conversion utility and does not involve executing code from the input files.
  • [COMMAND_EXECUTION]: The skill uses standard command-line tools such as uv, python, and pdftoppm for dependency management and document processing. These tools are used according to best practices for a development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 11:41 AM