solo-pdf-print
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides instructions for setting the
DYLD_FALLBACK_LIBRARY_PATHenvironment variable. This is a common and legitimate troubleshooting step for macOS users to ensure theweasyprintlibrary can locate its system dependencies (likelibgobject). The suggested path (/opt/homebrew/lib) is the standard, trusted location for Homebrew libraries on modern Apple Silicon Macs. - [INDIRECT_PROMPT_INJECTION]: The skill describes workflows for processing external data (HTML and Markdown files) into PDFs, which introduces a potential surface for indirect prompt injection.
- Ingestion points: The skill references processing files such as
out.htmland Markdown files provided via CLI arguments (FILE1.md). - Boundary markers: No explicit boundary markers or sanitization logic are provided in the code templates.
- Capability inventory: The skill uses the
Bash,Read,Write, andEdittools to manage files and execute Python scripts that perform document conversion. - Sanitization: There is no evidence of sanitization for the input data. However, this processing is inherent to the skill's primary function as a document conversion utility and does not involve executing code from the input files.
- [COMMAND_EXECUTION]: The skill uses standard command-line tools such as
uv,python, andpdftoppmfor dependency management and document processing. These tools are used according to best practices for a development environment.
Audit Metadata