convert-pdf-to-epub
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The file
scripts/analyze.pycontains a Byte Order Mark (U+FEFF) at the start of the file. This non-printing character is often an artifact of text editors but is classified as an obfuscation technique because it can be used to bypass simple string-matching security filters. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process text from external, potentially untrusted PDF documents. • Ingestion points:
core/pdf_extractor.py(extracts text from PDF files) andcore/epub_extractor.py(extracts text from EPUB files). • Boundary markers: No explicit boundary markers or instructions are used to prevent the agent from following natural language instructions found within the processed text. • Capability inventory: The skill is configured with broad tool access, includingWrite,Bash, andEdit. • Sanitization: While the skill performs text canonicalization and HTML escaping for formatting purposes, it does not include safety-specific sanitization to mitigate embedded prompt instructions.
Audit Metadata