nano-pdf
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
nano-pdfpackage from the official Python Package Index (PyPI), which is a well-known service for Python dependencies.\n- [COMMAND_EXECUTION]: The skill performs its primary function by executing thenano-pdfcommand-line utility, which processes files and instructions as subprocess arguments.\n- [PROMPT_INJECTION]: The skill processes PDF documents that may contain untrusted data, providing an indirect prompt injection surface.\n - Ingestion points: Data is read from local PDF files (SKILL.md).\n
- Boundary markers: No delimiters or safety instructions are specified to isolate the document content from the agent's logic.\n
- Capability inventory: The skill executes shell commands via
nano-pdfwhich can be influenced by the document content (SKILL.md).\n - Sanitization: There is no mention of content sanitization or validation of the input PDF files.
Audit Metadata