pdf-processing-anthropic
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill includes functionality for reading and extracting text from PDF documents using libraries like
pypdfandpdfplumber. While standard, this introduces an indirect prompt injection surface where malicious instructions embedded in a processed PDF could potentially influence the agent's behavior. No active injection or safety bypass instructions were found.\n - Ingestion points:
scripts/extract_form_field_info.py,scripts/extract_form_structure.py, andreference.md.\n - Boundary markers: None explicitly mentioned in the processing instructions.\n
- Capability inventory: The skill uses
pypdffor file writing and provides instructions for executing command-line processing tools.\n - Sanitization: None implemented, as the scripts are designed for direct utility processing.\n- [DYNAMIC_EXECUTION]: The script
scripts/fill_fillable_fields.pyutilizes runtime monkeypatching to modify thepypdflibrary's internal behavior for handling choice fields. This modification is limited to ensuring compatibility and does not present an execution risk.\n- [COMMAND_EXECUTION]: The documentation provides examples and instructions for executing common command-line utilities such asqpdf,pdftk, andmagick. These are standard tools for the operations described and represent legitimate use within the skill's scope.
Audit Metadata