pdf-text-replace
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from PDF files and user-supplied strings.
- Ingestion points: The script
scripts/replace_text_in_pdf.pyreads content from the file system based on theinput_pdfargument. - Boundary markers: No explicit delimiters are used to separate the PDF data from the agent's instructions.
- Capability inventory: The script is restricted to PDF manipulation using the
pypdflibrary. It does not possess network capabilities, subprocess execution, or dynamic code evaluation. - Sanitization: The script performs search-and-replace operations on raw field values without sanitization. While this is an attack surface, the lack of dangerous capabilities mitigates the risk.
- [COMMAND_EXECUTION]: The documentation provides standard instructions for executing the included Python script via the command line to process PDF files.
Audit Metadata