Pass
Audited by Gen Agent Trust Hub on May 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and scripts are focused on legitimate PDF processing tasks. All referenced Python and Node.js libraries are standard tools for document management and form handling.- [PROMPT_INJECTION]: The skill processes external PDF files, which represents an indirect prompt injection surface. Evidence chain for this risk includes:\n
- Ingestion points: PDF files are read via
pypdf,pdfplumber, andpytesseractin multiple scripts.\n - Boundary markers: Absent. Instructions do not specify delimiters for data extracted from documents.\n
- Capability inventory: Local file read/write for document processing; no network or administrative shell access is requested.\n
- Sanitization: Absent. Content is processed as raw text.- [COMMAND_EXECUTION]: The skill documentation includes examples for standard command-line utilities like
qpdf,pdftotext, andpdfimages. These are used for intended PDF manipulation tasks and do not involve suspicious or obfuscated execution patterns.
Audit Metadata