pdf

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/fill_fillable_fields.py performs a monkeypatch at runtime, replacing the DictionaryObject.get_inherited method in the pypdf library with a custom implementation (monkeypatch_pydpf_method). This is documented as a workaround for a specific bug in pypdf version 5.7.0 that causes crashes when processing choice list fields.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted PDF documents, which presents a surface for indirect prompt injection if malicious content within a PDF influences the agent's logic.
  • Ingestion points: Untrusted data enters via PDF files read by pypdf and pdfplumber (as seen in scripts/extract_form_field_info.py and SKILL.md) and configuration files loaded via json.load().
  • Boundary markers: The skill documentation in forms.md explicitly mandates a multi-step verification process, requiring the agent to perform visual analysis of images and run automated checks (scripts/check_bounding_boxes.py) before completing tasks.
  • Capability inventory: The skill possesses the capability to write PDF files (writer.write), generate images (image.save), and execute command-line utilities such as qpdf and pdftotext.
  • Sanitization: The scripts/fill_fillable_fields.py utility includes a validation_error_for_field_value function that strictly validates input values against the PDF's schema (e.g., checking valid options for checkboxes and radio groups) before writing data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 01:46 AM