Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions include the use of
sudo apt-get install -y poppler-utilsfor setting up dependencies on Ubuntu/Debian systems. - [EXTERNAL_DOWNLOADS]: The skill requires downloading and installing third-party Python packages (
reportlab,pdfplumber,pypdf) and system-level rendering tools (poppler). - [COMMAND_EXECUTION]: The skill utilizes the
pdftoppmcommand-line utility to perform PDF-to-image rendering tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes PDF documents which are untrusted external data sources, creating a vulnerability to embedded instructions.
- Ingestion points: Data and text are ingested from PDF files using the
pdfplumberandpypdflibraries as described inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or protective prompt wrappers when handling content extracted from PDFs.
- Capability inventory: The skill is capable of writing to the file system (within
tmp/pdfs/andoutput/pdf/) and executing shell commands for rendering and package installation. - Sanitization: No specific sanitization, filtering, or validation steps for the extracted PDF content are defined in the workflow.
Audit Metadata