convert-pdf-to-epub

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [OBFUSCATION]: The file scripts/analyze.py contains a Byte Order Mark (U+FEFF) at the start of the file. This non-printing character is often an artifact of text editors but is classified as an obfuscation technique because it can be used to bypass simple string-matching security filters.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process text from external, potentially untrusted PDF documents. • Ingestion points: core/pdf_extractor.py (extracts text from PDF files) and core/epub_extractor.py (extracts text from EPUB files). • Boundary markers: No explicit boundary markers or instructions are used to prevent the agent from following natural language instructions found within the processed text. • Capability inventory: The skill is configured with broad tool access, including Write, Bash, and Edit. • Sanitization: While the skill performs text canonicalization and HTML escaping for formatting purposes, it does not include safety-specific sanitization to mitigate embedded prompt instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 10:29 PM