nutrient-document-processing
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill facilitates sending document content to Nutrient's official API at
https://api.nutrient.io/buildfor processing. This is the core functionality of the service and follows standard document processing patterns. - [COMMAND_EXECUTION]: Provides
curlcommands for interacting with the API and usesnpxto execute the official Model Context Protocol (MCP) server. - [EXTERNAL_DOWNLOADS]: Downloads the
@nutrient-sdk/dws-mcp-serverpackage from the npm registry vianpx. This is an official package from a well-known service provider. - [CREDENTIALS_UNSAFE]: Instructions correctly advise users to provide their own API key via environment variables (
NUTRIENT_API_KEY) rather than hardcoding them. The provided key prefixpdf_live_...is a placeholder example.
Audit Metadata