nano-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
nano-pdfpackage from the public PyPI registry. - [COMMAND_EXECUTION]: The skill uses the
nano-pdfcommand-line interface to execute file modification tasks on the local system. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by processing external PDF files which may contain adversarial instructions.
- Ingestion points: Reads content from the
<file.pdf>argument specified in thenano-pdf editcommand inSKILL.md. - Boundary markers: No delimiters or "ignore embedded instructions" warnings are used when processing the PDF content.
- Capability inventory: The tool has the capability to write and modify files on the local filesystem.
- Sanitization: There is no evidence of content sanitization or validation performed on the PDF data before it is processed by the underlying logic.
Audit Metadata