Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system-level commands to facilitate PDF rendering and environment setup.
- Evidence: Uses
pdftoppmfor converting PDF pages to PNG images. - Evidence: Uses
sudo apt-get install -y poppler-utilsto install system dependencies on Debian-based systems. - [INDIRECT_PROMPT_INJECTION]: The skill processes external PDF files, creating a surface for indirect prompt injection if the content is malicious.
- Ingestion points: PDF files read via
pdfplumberorpypdf(SKILL.md). - Boundary markers: Absent; the skill does not specify markers to distinguish between PDF content and agent instructions.
- Capability inventory: Shell command execution via
pdftoppmandsoffice; file system writes totmp/andoutput/(SKILL.md). - Sanitization: No explicit sanitization or validation of PDF content is described.
Audit Metadata