lovstudio-any2pdf
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to run local Python scripts and system utilities such as pandoc and XeLaTeX to perform document typesetting.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard, reputable libraries and tools including reportlab, Pillow, and the TeX Live distribution (for the XeLaTeX fallback).
- [PROMPT_INJECTION]: As the tool processes user-provided Markdown files, it handles untrusted data. Standard security practices are followed by escaping content before PDF generation, mitigating potential indirect injection risks through the document content.
Audit Metadata