ocring-pdfs
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
scripts/ensure_ocr.sh) and system utilities (apt-get,pip,ocrmypdf,pdftotext) to install dependencies and manipulate files. These commands are integral to the skill's primary function of PDF processing. - [EXTERNAL_DOWNLOADS]: The installation script fetches software from standard package registries. It installs the
ocrmypdfPython package viapipand several system dependencies (tesseract-ocr,ghostscript,pngquant,poppler-utils) viaapt-getto enable OCR capabilities. These are well-known tools from trusted registries. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data in the form of PDF files, which is an inherent risk for AI agents.
- Ingestion points: The skill reads input PDF files (
in.pdf) to generate a searchable text layer. - Boundary markers: The instructions do not implement delimiters or provide specific warnings to the agent regarding the handling of potentially malicious instructions embedded within the OCR-extracted text.
- Capability inventory: The skill environment allows for software installation, shell command execution, and file system access.
- Sanitization: There is no documented sanitization or filtering of the text extracted via OCR before it is returned to the agent's context.
Audit Metadata