Fail
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to use
sudo apt-get installto install system dependencies (poppler-utils), which requires elevated privileges. - [COMMAND_EXECUTION]: The skill executes the
pdftoppmutility to render PDF pages into images. - [EXTERNAL_DOWNLOADS]: The skill installs several third-party Python packages (
reportlab,pdfplumber,pypdf) and system tools (poppler) from external repositories. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it processes untrusted PDF files.
- Ingestion points: PDF files are read using
pdfplumber,pypdf, and rendered viapdftoppm(SKILL.md). - Boundary markers: None identified; instructions do not specify how to distinguish between PDF data and potential embedded instructions.
- Capability inventory: The skill can execute shell commands (
pdftoppm,pip install,apt-get install) and write to the local file system (tmp/pdfs/,output/pdf/). - Sanitization: No sanitization or validation of PDF content or filenames is mentioned before processing.
Recommendations
- AI detected serious security threats
Audit Metadata