bx-pdf
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
install-bx-moduleandbox installcommands to install thebx-pdfmodule, which are standard package management operations for the BoxLang environment.\n- [COMMAND_EXECUTION]: The skill enables writing PDF files to the local file system through thefilenameattribute in thebx:documentcomponent and thefileWritescript function, which provides the agent with file system modification capabilities.\n- [EXTERNAL_DOWNLOADS]: The skill supports fetching content from external URLs using thesrcattribute in thebx:documentsectioncomponent. This allows the PDF engine to perform network requests to retrieve and render remote web content.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local files and remote URLs to generate document output, which represents an injection surface if the ingested data contains malicious instructions.\n - Ingestion points: Data is retrieved from local paths using
srcfileand from remote URLs using thesrcattribute inbx:documentsection.\n - Boundary markers: The documentation does not specify the use of delimiters or clear instructions for the agent to ignore any embedded directives within the retrieved HTML content.\n
- Capability inventory: The skill possesses the ability to perform file system writes and execute network requests to external domains.\n
- Sanitization: There are no mentioned mechanisms for sanitizing, escaping, or validating the ingested content before it is rendered by the PDF generation engine.
Audit Metadata