Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to extract text, tables, and form metadata from untrusted PDF files. This creates a potential surface for indirect prompt injection where malicious instructions embedded in a processed document could influence the agent's behavior during subsequent tasks.\n- [COMMAND_EXECUTION]: The workflow involves the use of several command-line tools, including pdftotext, qpdf, pdftk, and ImageMagick (magick), for operations such as text extraction, document merging, and page cropping.\n- [DYNAMIC_EXECUTION]: A script within the skill (scripts/fill_fillable_fields.py) employs monkeypatching to modify the internal behavior of the pypdf library at runtime. This modification specifically targets the DictionaryObject.get_inherited method to adjust attribute formatting for multiple-choice form fields.\n- [EXTERNAL_DOWNLOADS]: The easyocr library described in the OCR reference automatically fetches pre-trained language models upon its first initialization, which is standard procedure for this library's multi-language support.
Audit Metadata