mapping-documents
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from PDF files which is interpolated into prompts for the Anthropic API for semantic extraction.\n
- Ingestion points: The
scripts/docmap.pyutility reads external PDF files provided by the user via thepdfplumberlibrary.\n - Boundary markers: The LLM prompts utilize structured headers such as
SECTION,PAGES, andTEXTto delimit the document content from instructions.\n - Capability inventory: The skill communicates with the Anthropic API and writes extracted data files (
_MAP.md,.symbols.json,.anchors.json) to the local file system.\n - Sanitization: The script performs JSON validation on the API response and includes error handling for parsing failures.\n- [EXTERNAL_DOWNLOADS]: The skill installs the
pdfplumberandanthropicPython packages. Theanthropicpackage is a standard library provided by a well-known and trusted organization.
Audit Metadata