etsi-spec
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uv runto execute a local Python scriptscripts/get_etsi_spec.py. This is a standard execution pattern for this environment and is limited to running the provided script with user-supplied specification numbers as arguments. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by downloading and parsing PDF files from
etsi.orgto extract titles and publication dates. - Ingestion points: The
extract_pdf_metadatafunction inscripts/get_etsi_spec.pydownloads PDFs from ETSI and extracts text from the first page usingPyPDF2. - Boundary markers: None identified. The extracted text is directly printed to the console.
- Capability inventory: The skill has network access (via
requests) to download PDFs and file system access (viauv run) to execute the script. - Sanitization: The script performs basic regex filtering on extracted text to identify titles, but does not sanitize for potentially malicious instructions embedded in the PDF content. However, the risk is low as the output is primarily for user display.
Audit Metadata