Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external PDF files, creating a surface for indirect prompt injection.
- Ingestion points: Reads content from document.pdf and invoice.pdf in SKILL.md.
- Boundary markers: No delimiters or 'ignore instructions' warnings are used when extracting text.
- Capability inventory: The skill enables text extraction, table parsing, and OCR using pdfplumber, PyMuPDF, and pytesseract.
- Sanitization: Extracted content is not sanitized or validated before processing.
- [COMMAND_EXECUTION]: The skill provides Python code snippets for file manipulation and data processing.
- Evidence: Examples in SKILL.md demonstrate opening files, extracting data, and processing images using standard libraries.
Audit Metadata