pdf-extract
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to install the
poppler-utilspackage usingsudo dnf install. This requires administrative privileges to modify the system's software configuration.- [PROMPT_INJECTION]: The skill's primary function is to extract text from untrusted PDF files for processing by the agent. This represents an indirect prompt injection surface where malicious instructions hidden within a PDF could potentially override agent behavior. - Ingestion points: PDF file content processed by
pdftotext(SKILL.md). - Boundary markers: None specified; instructions do not define delimiters to separate extracted text from system prompts.
- Capability inventory: PDF to text conversion for LLM ingestion.
- Sanitization: No mention of filtering, escaping, or validating the extracted text before it is presented to the agent context.- [NO_CODE]: The skill contains only markdown instructions and metadata, without any accompanying scripts or executable code files.
Audit Metadata