pdf-patch
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for localized PDF repair. It operates exclusively on local files and system fonts to match the visual style of scanned documents without any unauthorized data access or external communication.
- [PROMPT_INJECTION]: The skill ingests untrusted PDF data which constitutes a potential attack surface for indirect prompt injection. 1. Ingestion points: PDF files are processed using the PyMuPDF library in scripts/inspect_pdf.py and scripts/repair_scanned_pdf_text.py. 2. Boundary markers: There are no explicit instructions or delimiters used to separate user-provided data from potential instructions within the documents. 3. Capability inventory: The skill possesses capabilities to read and write PDF and image files and access local system font directories. 4. Sanitization: No sanitization or filtering of the extracted PDF text is performed prior to processing.
Audit Metadata