opendataloader-pdf
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
opendataloader-pdfpackage from a package registry to provide its core parsing features. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute Python modules and requires a local Java 17+ environment to process files. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes external PDF files from local storage and user-defined directories such as the Obsidian Vault inbox (
SKILL.md). - Boundary markers: Absent. The skill does not define specific delimiters or warnings to isolate processed PDF content from the agent's instructions.
- Capability inventory: The skill is granted access to the
Bash,Read, andWritetools (SKILL.md), allowing for file system interaction and command execution. - Sanitization: Absent. There are no instructions for sanitizing or filtering the content extracted from documents before it is processed by the AI.
Audit Metadata