Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external PDF documents, which inherently involves an attack surface for instructions embedded in data; however, the skill focuses on structured data extraction and form filling.
- [COMMAND_EXECUTION]: Documentation provides examples for using established command-line tools like qpdf and pdftotext to perform complex PDF operations that are outside the scope of the included Python scripts.
- [DYNAMIC_EXECUTION]: The fill_fillable_fields.py script applies a runtime patch to the pypdf library to ensure correct handling of inherited form field values, which is necessary for the skill's functionality.
Audit Metadata