pdfcraft
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and an interface for PdfCraft, an open-source PDF workbench. Analysis of the instructions, tool registries, and verification evidence shows a legitimate toolset for PDF manipulation and automation without any malicious patterns.
- [DYNAMIC_EXECUTION]: The skill supports Acrobat-compatible JavaScript (
js_run) and automated tool chains via JSON scripts. These are standard features for the application's stated purpose as a professional PDF editor and are implemented as local processing tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF documents, which is a standard surface for document manipulation tools. It addresses data exposure risks by providing specialized capabilities for sanitization (
doc_remove_hidden) and redaction auditing (doc_audit_redactions) to ensure sensitive information is correctly removed. - [COMMAND_EXECUTION]: UI automation is supported through a control channel that is opt-in and loopback-only. The skill follows security best practices by requiring token-based authentication via an owner-only configuration file to prevent unauthorized access.
Audit Metadata