skills/lidge-jun/cli-jaw-skills/pdf/Gen Agent Trust Hub

pdf

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes system-level commands to facilitate PDF rendering and environment setup.
  • Evidence: Uses pdftoppm for converting PDF pages to PNG images.
  • Evidence: Uses sudo apt-get install -y poppler-utils to install system dependencies on Debian-based systems.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external PDF files, creating a surface for indirect prompt injection if the content is malicious.
  • Ingestion points: PDF files read via pdfplumber or pypdf (SKILL.md).
  • Boundary markers: Absent; the skill does not specify markers to distinguish between PDF content and agent instructions.
  • Capability inventory: Shell command execution via pdftoppm and soffice; file system writes to tmp/ and output/ (SKILL.md).
  • Sanitization: No explicit sanitization or validation of PDF content is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 03:35 PM