pdfcraft-cli-setup
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a binary release of the PDF processing engine from GitHub. This process, implemented in
bootstrap.py, includes mandatory SHA256 integrity checks against a locked manifest and security-hardened ZIP extraction that explicitly rejects absolute paths, parent directory references (..), and symbolic links to prevent filesystem attacks. - [COMMAND_EXECUTION]: The skill executes the verified CLI binary and internal scripts using the
subprocessmodule. These calls are performed using list-based arguments rather than shell strings to prevent command injection, and diagnostic checks ensure the correct version is loaded before any sensitive operations occur. - [DYNAMIC_EXECUTION]: Local helper modules within the skill's script directory are loaded at runtime using
importlib. These loads are restricted to files provided within the skill package, ensuring that external or unverified code cannot be injected through this mechanism. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided PDF files and task plans. It mitigates injection risks through strict JSON schema validation for all commands and a mandatory human-in-the-loop review process where safety checks (geometry, text classification, and hash verification) must pass before a task is considered complete.
Audit Metadata