Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to install system dependencies using elevated privileges.\n
- Evidence: 'sudo apt-get install -y poppler-utils' in SKILL.md.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing several Python packages and system tools from established registries and official repositories.\n
- Evidence: 'pip install reportlab pdfplumber pypdf' and 'brew install poppler' in SKILL.md.\n- [PROMPT_INJECTION]: The skill processes external PDF files, creating a surface for indirect prompt injection.\n
- Ingestion points: PDF reading and text extraction tasks described in SKILL.md.\n
- Boundary markers: The instructions lack delimiters or explicit warnings to prevent the agent from executing instructions found within PDF content.\n
- Capability inventory: The skill utilizes subprocess calls (pdftoppm) and writes to the local file system.\n
- Sanitization: No sanitization or content validation steps are defined for the data extracted from PDF files.
Audit Metadata