pdf2epub

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted PDF data from external sources.
  • Ingestion points: The input.pdf file is processed using the pymupdf library in scripts/pdf2epub.py.
  • Boundary markers: The script uses an esc() function to escape XML special characters (e.g., &, <, >), providing basic sanitization for the generated EPUB content.
  • Capability inventory: The skill has the capability to create directories and write files (EPUB output and extracted images) to the local filesystem using os.makedirs and open().write().
  • Sanitization: Content extracted from the PDF is normalized and escaped before being embedded in the EPUB's XHTML structure.
  • [DYNAMIC_EXECUTION]: The test suite (tests/test_pdf2epub.py) utilizes importlib.util to dynamically load the pdf2epub.py engine script from a computed relative path for testing purposes.
  • [DYNAMIC_EXECUTION]: The SKILL.md documentation includes a Python-based verification script that is executed via a shell heredoc (`python3
  • <<'EOF'`). This is used for link checking within the generated EPUB file and is a standard developer utility pattern.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 09:55 PM