Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection because it instructs the agent to extract and analyze content from user-provided PDF files.
- Ingestion points: The agent uses tools like
pypdf,pdfplumber, andpytesseract(OCR) to extract text and image data from external PDF files (as seen inscripts/extract_form_field_info.pyandscripts/convert_pdf_to_images.py). - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between the skill's own instructions and instructions potentially embedded within the data of the processed PDFs.
- Capability inventory: The skill allows for the execution of shell commands (
qpdf,pdftotext) and local file system writes. - Sanitization: No sanitization or filtering is performed on the extracted text or OCR results before they are presented to the agent for analysis in
forms.mdandSKILL.md. - [COMMAND_EXECUTION]: The skill documentation and scripts facilitate the execution of several command-line utilities for PDF processing.
- Evidence:
SKILL.mdandreference.mdprovide command-line examples forpdftotext,qpdf,pdftk,pdfimages, andpdftoppmto perform document transformations and data extraction.
Audit Metadata