liteparse
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse untrusted data from various document formats (PDF, DOCX, XLSX, etc.) which are then processed by the agent. \n
- Ingestion points: The
LiteParse.parsemethod and thelit parseCLI command inSKILL.mdandscripts/batch_parse_dir.pyingest data from local files or standard input.\n - Boundary markers: The extracted text is returned without specific delimiters or warnings to the agent to ignore instructions embedded within the document content.\n
- Capability inventory: The skill environment permits file system operations and shell command execution through the allowed tools, providing a surface for impact if an injection is successful.\n
- Sanitization: The skill does not perform sanitization or filtering of the extracted text to prevent malicious instructions from reaching the agent context.\n- [EXTERNAL_DOWNLOADS]: The skill requires the installation of external packages and system-level tools from established sources.\n
- The instructions specify installing
liteparsefrom PyPI and@llamaindex/liteparsefrom npm, which are official packages from LlamaIndex.\n - It also guides the user to install system dependencies like
LibreOfficeandImageMagickfor extended format support using standard package managers.\n- [COMMAND_EXECUTION]: The skill provides a CLI tool and a helper script for batch processing documents.\n SKILL.mdandreferences/cli_reference.mddemonstrate the use of thelitCLI tool for parsing and screenshots.\nscripts/batch_parse_dir.pyis a Python utility that performs file system operations and calls the parsing library to process directories of documents.\n- [DATA_EXFILTRATION]: The skill supports sending document data to an external server for OCR processing.\n- The
ocr_server_urlparameter documented inreferences/ocr_and_formats.mdandreferences/api_reference.mdallows document images to be sent to an external HTTP endpoint. Users should ensure any configured OCR server is trusted.
Audit Metadata