opendataloader-pdf
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to install the Python package via pip and execute the conversion utility through the command-line interface.
- [EXTERNAL_DOWNLOADS]: Fetches the 'opendataloader-pdf' package (version 2.2.1) from the standard Python package registry. This is a vendor-owned resource associated with 'matematicsolutions'.
- [PROMPT_INJECTION]: The skill processes untrusted PDF documents and converts them into Markdown for AI consumption, which creates a potential surface for indirect prompt injection.
- Ingestion points: Reads PDF files from local input directories (e.g., 'wszystko co wpada szybko/').
- Boundary markers: No specific delimiters or 'ignore' instructions are documented for the converted output.
- Capability inventory: The skill possesses Bash execution, filesystem read, and filesystem write capabilities.
- Sanitization: No explicit sanitization, validation, or filtering of the PDF content is described before it is passed to the AI context.
Audit Metadata