read-pdf
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the pdf-parse library from the jsDelivr CDN, a well-known service for delivering NPM packages.\n- [DYNAMIC_EXECUTION]: Loads library code at runtime using dynamic import() and initializes a worker script via an external URL.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external PDF documents, creating a surface for potential indirect prompt injection attacks.\n
- Ingestion points: Reads document.pdf via readFileBinary as shown in the code example in SKILL.md.\n
- Boundary markers: None present in the example code to delimit untrusted PDF content.\n
- Capability inventory: The extracted text is processed within the run_script environment and can be logged or used by the agent.\n
- Sanitization: No sanitization or filtering of the extracted PDF text is demonstrated.
Audit Metadata