Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses established and reputable libraries like pypdf, pdfplumber, and reportlab for its operations. No malicious patterns, obfuscation, or credential theft were detected.
- [COMMAND_EXECUTION]: The skill utilizes external command-line utilities such as qpdf, poppler-utils (pdftotext, pdfimages), and ImageMagick for advanced processing. These are standard tools for the described tasks.
- [DATA_EXFILTRATION]: While the skill processes user-provided PDF files which may contain sensitive data, it performs all operations locally and does not include any network-based exfiltration logic.
- [PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection by processing untrusted external PDF files. Evidence Chain: 1. Ingestion points: PDF reading via pypdf and pdfplumber in all scripts. 2. Boundary markers: None. 3. Capability inventory: File system write operations and command execution via qpdf and magick. 4. Sanitization: Bounding box validation is present, but no content sanitization is applied to extracted text.
Audit Metadata