acroform-writer
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- PDF Processing Logic: The skill utilizes the
pypdflibrary to interact with PDF AcroForms. The included script,scripts/fill_form.py, is designed specifically to list and populate form fields, which aligns with the skill's described functionality. - Data Ingestion and Knowledge Source: The instructions guide the agent to source PDF templates from a connected SharePoint knowledge base. This practice limits the risk associated with processing untrusted file structures by favoring verified organizational templates.
- Field Validation and Transparency: The skill follows a multi-step process where it first identifies all valid form fields (including types and options for checkboxes and dropdowns) before attempting to write data. The agent is further instructed to report any unmatched data points, ensuring user oversight and preventing unexpected document modifications.
- Indirect Prompt Injection Surface: As with any tool that parses document metadata, the skill ingests field names and values that could contain unexpected content. However, the skill mitigates this by requiring explicit mapping and providing clear guardrails against inventing values or guessing field names.
- Sandboxed Execution: The skill operates within the agent's Python environment using standard file operations and local dependencies, with no network activity or elevated privileges detected.
Audit Metadata