pdf2epub
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted PDF data from external sources.
- Ingestion points: The
input.pdffile is processed using thepymupdflibrary inscripts/pdf2epub.py. - Boundary markers: The script uses an
esc()function to escape XML special characters (e.g., &, <, >), providing basic sanitization for the generated EPUB content. - Capability inventory: The skill has the capability to create directories and write files (EPUB output and extracted images) to the local filesystem using
os.makedirsandopen().write(). - Sanitization: Content extracted from the PDF is normalized and escaped before being embedded in the EPUB's XHTML structure.
- [DYNAMIC_EXECUTION]: The test suite (
tests/test_pdf2epub.py) utilizesimportlib.utilto dynamically load thepdf2epub.pyengine script from a computed relative path for testing purposes. - [DYNAMIC_EXECUTION]: The
SKILL.mddocumentation includes a Python-based verification script that is executed via a shell heredoc (`python3 - <<'EOF'`). This is used for link checking within the generated EPUB file and is a standard developer utility pattern.
Audit Metadata