Warn
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to use sudo to install the poppler-utils system package on Debian-based systems, granting elevated permissions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external PDF files using extraction tools, creating a surface where malicious instructions in a PDF could influence the agent. • Ingestion points: Reading external PDFs in SKILL.md using pdfplumber and pypdf. • Boundary markers: None; the skill does not instruct the agent to use delimiters for external content. • Capability inventory: Shell execution (pdftoppm), file system access, and package installation. • Sanitization: None; the skill lacks instructions to sanitize or validate extracted text.
- [COMMAND_EXECUTION]: The skill utilizes shell commands for rendering PDFs (pdftoppm) and managing dependencies (uv, pip, brew, apt-get).
Audit Metadata