Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external PDF documents for tasks such as text extraction, form filling, and OCR, which presents a surface for indirect prompt injection if the files contain malicious instructions.
- Ingestion points: PDF files processed for extraction and manipulation.
- Boundary markers: The instructions do not specify explicit delimiters for data vs. instructions.
- Capability inventory: The skill utilizes
pypdf2andreportlabfor file system operations related to PDF generation and modification. - Sanitization: The skill guidelines include a best practice to "Always validate inputs before processing," which helps mitigate ingestion risks.
Audit Metadata