nutrient-document-processing
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple examples of using
curlto interact with the Nutrient API for document conversion, data extraction, and OCR. These commands are localized to the user's specific files and the official service endpoint. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to run an MCP server using
npx -y @nutrient-sdk/dws-mcp-server. This fetches the official package from the npm registry for native tool integration. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by recommending the use of an environment variable (
NUTRIENT_API_KEY) for authentication rather than hardcoding secrets in scripts or prompts. - [DATA_EXFILTRATION]: While the skill sends document data to a remote service (
https://api.nutrient.io/build), this is the primary and stated purpose of the skill, and the destination is an established service provider.
Audit Metadata